Manager Server (Suse) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-04-22. Vendor: Suse.
CVEs of Manager Server
- CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
- CVE-2023-22644 - CVSS 9.4 (critical), 2023-09-20: A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform…
- CVE-2023-29552 - CVSS 7.5 (high), 2023-04-25: The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use…
- CVE-2022-43754 - CVSS 5.4 (medium), 2022-11-10: An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for…
- CVE-2022-43753 - CVSS 4.3 (medium), 2022-11-10: A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE…
- CVE-2022-31255 - CVSS 4.3 (medium), 2022-11-10: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE…
- CVE-2022-31248 - CVSS 5.3 (medium), 2022-06-22: A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover…
- CVE-2022-21952 - CVSS 7.5 (high), 2022-06-22: A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to…
- CVE-2022-27239 - CVSS 7.8 (high), 2022-04-27: In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root…
- CVE-2021-4034 - CVSS 7.8 (high), 2022-01-28: A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users…
- CVE-2014-3654 - CVSS 4.3 (medium), 2014-11-03: Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote…
- CVE-2014-3595 - CVSS 4.3 (medium), 2014-09-22: Cross-site scripting (XSS) vulnerability in spacewalk-java 1.2.39, 1.7.54, and 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.4 through 5.6 allows…
