spacecmd vulnerabilities (openSUSE)
89 vulnerabilities.
spacecmdopenSUSEExposure of Sensitive Information in Grafana4.3 MediumspacecmdopenSUSECross Site Request Forgery in Grafana6.3 MediumspacecmdopenSUSECross site scripting in Grafana proxy6.5 MediumspacecmdopenSUSEOAuth Identity Token exposure in Grafana4.3 MediumspacecmdopenSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 HighspacecmdopenSUSEGrafana directory traversal for `.cvs` files4.3 MediumspacecmdopenSUSEDirectory Traversal in Grafana4.3 MediumspacecmdopenSUSEGrafana path traversal7.5 HighspacecmdopenSUSECross organization admin control in Grafana9.1 CriticalspacecmdopenSUSEPrototype Pollution in kriszyp/json-schema9.8 CriticalspacecmdopenSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 MediumspacecmdopenSUSEAnsible discloses sensitive information in traceback error message5.5 MediumspacecmdopenSUSESnapshot authentication bypass in grafana9.8 CriticalspacecmdopenSUSEImproper Input Validation and Command Injection in Ansible7.1 HighspacecmdopenSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 HighspacecmdopenSUSESM2 Decryption Buffer Overflow9.8 CriticalspacecmdopenSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 HighspacecmdopenSUSEArbitrary redirects under /new endpoint6.5 MediumspacecmdopenSUSEA flaw was found in several ansible modules, where parameters containing credentials, such as...5.5 MediumspacecmdopenSUSEOne of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7...7.5 HighspacecmdopenSUSEThe team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x...6.5 MediumspacecmdopenSUSEThe team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control...6.5 MediumspacecmdopenSUSEGrafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor...7.1 HighspacecmdopenSUSEAnsible Exposes Sensitive Information7.5 HighspacecmdopenSUSEInsertion of Sensitive Information into Log File in ansible5.5 MediumspacecmdopenSUSEInsertion of Sensitive Information into Log File in ansible5.5 MediumspacecmdopenSUSEInsertion of Sensitive Information into Log File in ansible5.5 MediumspacecmdopenSUSERegular Expression Denial of Service (ReDoS)7.5 HighspacecmdopenSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 MediumspacecmdopenSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 MediumspacecmdopenSUSEImproper Verification of Cryptographic Signature in ansible7.1 HighspacecmdopenSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 MediumspacecmdopenSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 MediumspacecmdopenSUSEAnsible Improper Input Validation vulnerability7.8 HighspacecmdopenSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 MediumspacecmdopenSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 HighspacecmdopenSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 CriticalspacecmdopenSUSEImproper Input Validation in ansible2.2 LowspacecmdopenSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Medium