rhnlib vulnerabilities (openSUSE)

17 vulnerabilities.

• rhnlib openSUSE Exposure of Sensitive Information in Grafana CVE-2022-21713 Fix available 4.3 MediumFebruary 8, 2022
• rhnlib openSUSE Cross Site Request Forgery in Grafana CVE-2022-21703 Fix available 6.3 MediumFebruary 8, 2022
• rhnlib openSUSE Cross site scripting in Grafana proxy CVE-2022-21702 Fix available 6.5 MediumFebruary 8, 2022
• rhnlib openSUSE OAuth Identity Token exposure in Grafana CVE-2022-21673 Fix available 4.3 MediumJanuary 18, 2022
• rhnlib openSUSE Grafana directory traversal for `.cvs` files CVE-2021-43815 Fix available 4.3 MediumDecember 10, 2021
• rhnlib openSUSE Directory Traversal in Grafana CVE-2021-43813 Fix available EPSS 56.6% 4.3 MediumDecember 10, 2021
• rhnlib openSUSE Grafana path traversal CVE-2021-43798 In KEVPublic exploitFix available EPSS 88.5% 7.5 HighDecember 7, 2021
• rhnlib openSUSE Cross organization admin control in Grafana CVE-2021-41244 Fix available 9.1 CriticalNovember 15, 2021
• rhnlib openSUSE XSS vulnerability allowing arbitrary JavaScript execution CVE-2021-41174 Fix available EPSS 85.4% 6.9 MediumNovember 3, 2021
• rhnlib openSUSE Snapshot authentication bypass in grafana CVE-2021-39226 In KEVFix available EPSS 99.9% 9.8 CriticalOctober 5, 2021
• rhnlib openSUSE SM2 Decryption Buffer Overflow CVE-2021-3711 Fix available EPSS 87.8% 9.8 CriticalAugust 24, 2021
• rhnlib openSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... CVE-2021-36222 Fix available EPSS 10.5% 7.5 HighJuly 22, 2021
• rhnlib openSUSE Arbitrary redirects under /new endpoint CVE-2021-29622 Fix available EPSS 19.6% 6.5 MediumMay 19, 2021
• rhnlib openSUSE One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7... CVE-2021-28148 Fix available 7.5 HighMarch 22, 2021
• rhnlib openSUSE The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x... CVE-2021-28147 Fix available 6.5 MediumMarch 22, 2021
• rhnlib openSUSE The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control... CVE-2021-28146 Fix available 6.5 MediumMarch 22, 2021
• rhnlib openSUSE Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor... CVE-2021-27962 Fix available 7.1 HighMarch 22, 2021