Manager (Suse) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2019-05-13. Vendor: Suse.
CVEs of Manager
- CVE-2019-3684 - CVSS 5.9 (medium), 2019-05-13: SUSE Manager until version 4.0.7 and Uyuni until commit 1b426ad5ed0a7191a6fb46bb83e98ae4b99a5ade created world-readable swap files on systems that don't have…
- CVE-2015-5300 - CVSS 7.5 (high), 2017-07-21: The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default,…
- CVE-2015-5219 - CVSS 7.5 (high), 2017-07-21: The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote…
- CVE-2015-5194 - CVSS 7.5 (high), 2017-07-21: The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted…
- CVE-2017-7995 - CVSS 3.8 (low), 2017-05-03: Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to…
- CVE-2015-7976 - CVSS 4.3 (medium), 2017-01-30: The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows…
- CVE-2016-4954 - CVSS 7.5 (high), 2016-07-05: The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification)…
- CVE-2016-4953 - CVSS 7.5 (high), 2016-07-05: ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK…
- CVE-2016-0264 - CVSS 5.6 (medium), 2016-05-24: Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7…
- CVE-2016-3718 - CVSS 5.5 (medium), 2016-05-05: The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF)…
- CVE-2016-3715 - CVSS 5.5 (medium), 2016-05-05: The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
- CVE-2016-3427 - CVSS 9.8 (critical), 2016-04-21: Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect…
- CVE-2016-1286 - CVSS 8.6 (high), 2016-03-09: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via…
- CVE-2016-1285 - CVSS 6.8 (medium), 2016-03-09: named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows…
- CVE-2014-8162 - CVSS 7.5 (high), 2015-05-14: XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary…
- CVE-2015-2808 - CVSS 3.7 (low), 2015-04-01: The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which…
- CVE-2014-7812 - CVSS 3.5 (low), 2015-01-15: Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary…
- CVE-2014-7811 - CVSS 3.5 (low), 2015-01-15: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allow remote authenticated users to inject…
- CVE-2014-3654 - CVSS 4.3 (medium), 2014-11-03: Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote…
- CVE-2014-3595 - CVSS 4.3 (medium), 2014-09-22: Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows…
- CVE-2013-4415 - CVSS 4.3 (medium), 2014-02-14: Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script…
- CVE-2013-4480 - CVSS 7.5 (high), 2013-11-18: Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to…
