spacecmd vulnerabilities (openSUSE)
89 vulnerabilities.
-
spacecmdopenSUSE Rollup 4 has Arbitrary File Write via Path Traversal 8.8 High -
spacecmdopenSUSE Public Dashboards time range restriction on annotations can be bypassed 5.3 Medium -
spacecmdopenSUSE jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions 9.2 Critical -
spacecmdopenSUSE Uncontrolled Resource Consumption in @isaacs/brace-expansion 9.2 Critical -
spacecmdopenSUSE JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js 9.8 Critical -
spacecmdopenSUSE Dashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege Escalation 8.1 High -
spacecmdopenSUSE Unauthenticated DoS: avatar cache leaks goroutines when /avatar/:hash requests time out 7.5 High -
spacecmdopenSUSE Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
spacecmdopenSUSE Expr has Denial of Service via Unbounded Recursion in Builtin Functions 7.5 High -
spacecmdopenSUSE CVE-2025-12816 8.6 High -
spacecmdopenSUSE Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure 5.3 Medium -
spacecmdopenSUSE An open redirect vulnerability has been identified in Grafana OSS organization switching... 4.2 Medium -
spacecmdopenSUSE Grafana is vulnerable to XSS attacks through open redirects and path traversal 7.6 High -
spacecmdopenSUSE Grafana's insecure DingDing Alert integration exposes sensitive information 4.3 Medium -
spacecmdopenSUSE Security update for SUSE Manager Client Tools No score -
spacecmdopenSUSE Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
spacecmdopenSUSE Database password leaked by systemd uyuni-server-attestation service 5.7 Medium -
spacecmdopenSUSE Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 3.1 Low -
spacecmdopenSUSE Grafana alerting wrong permission on datasource rule write endpoint 5.1 Medium -
spacecmdopenSUSE go-retryablehttp can leak basic auth credentials to log files 6.0 Medium -
spacecmdopenSUSE Users outside an organization can delete a snapshot with its key 6.5 Medium -
spacecmdopenSUSE Email Validation Bypass And Preventing Sign Up From Email's Owner 5.4 Medium -
spacecmdopenSUSE Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
spacecmdopenSUSE Ansible: template injection 7.1 High -
spacecmdopenSUSE OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics 7.5 High -
spacecmdopenSUSE Large RSA keys can cause high CPU usage in crypto/tls 5.3 Medium -
spacecmdopenSUSE Improper rendering of text nodes in golang.org/x/net/html 6.1 Medium -
spacecmdopenSUSE Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
spacecmdopenSUSE Open redirect in Tornado 6.1 Medium -
spacecmdopenSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
spacecmdopenSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
spacecmdopenSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
spacecmdopenSUSE Grafana stored XSS in FileUploader component 7.3 High -
spacecmdopenSUSE Grafana vulnerable to spoofing originalUrl of snapshots 6.7 Medium -
spacecmdopenSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
spacecmdopenSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
spacecmdopenSUSE Grafana contains Improper Input Validation 6.4 Medium -
spacecmdopenSUSE Grafana users with email as a username can block other users from signing in 4.3 Medium -
spacecmdopenSUSE Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins 6.8 Medium -
spacecmdopenSUSE Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins 4.9 Medium -
spacecmdopenSUSE Grafana plugin signature bypass vulnerability 6.1 Medium -
spacecmdopenSUSE Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
spacecmdopenSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
spacecmdopenSUSE Grafana folders admin only permission privilege escalation 7.6 High -
spacecmdopenSUSE Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin 6.6 Medium -
spacecmdopenSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
spacecmdopenSUSE Grafana account takeover via OAuth vulnerability 7.1 High -
spacecmdopenSUSE Stored XSS in Grafana's Unified Alerting 7.3 High -
spacecmdopenSUSE Grafana Enterprise datasource network restrictions bypass via HTTP redirects 6.6 Medium -
spacecmdopenSUSE Prototype Pollution in async 7.8 High - Show olderLoading…