suse Vulnerability Advisory Catalog

Total 198 security vulnerabilities recorded for suse software and firmware.

← Back to All Vendors
Component: wrangler

A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SUSE Rancher allows remote attac...

📅 2023-02-07
CVSS 5.9 Dossier →
Component: rancher

A Insufficient Entropy vulnerability in SUSE Rancher allows attackers that gained knowledge of the cattle-token to continue abusing this even after th...

📅 2023-02-07
CVSS 7.1 Dossier →
Component: wrangler

A Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in wrangler of SUSE Rancher allows remote a...

📅 2023-02-07
CVSS 7.5 Dossier →
Component: rancher

A Missing Authorization vulnerability in of SUSE Rancher allows authenticated user to create an unauthorized shell pod and kubectl access in the local...

📅 2023-02-07
CVSS 7.4 Dossier →
Component: manager_server

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Modu...

📅 2022-11-10
CVSS 2.6 Dossier →
Component: manager_server

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for ...

📅 2022-11-10
CVSS 4.3 Dossier →
Component: manager_server

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for...

📅 2022-11-10
CVSS 4.3 Dossier →
CVE-2022-31247 CRITICAL
Component: rancher

An Improper Authorization vulnerability in SUSE Rancher, allows any user who has permissions to create/edit cluster role template bindings or project ...

📅 2022-09-07
CVSS 9.1 Dossier →
CVE-2021-36783 CRITICAL
Component: rancher

A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project ...

📅 2022-09-07
CVSS 9.9 Dossier →
CVE-2021-36782 CRITICAL
Component: rancher

A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners, Proje...

📅 2022-09-07
CVSS 9.9 Dossier →
Component: manager_server

A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to disco...

📅 2022-06-22
CVSS 5.3 Dossier →
Component: manager_server

A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attac...

📅 2022-06-22
CVSS 7.5 Dossier →
Component: rancher

A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network da...

📅 2022-05-25
CVSS 6.8 Dossier →
CVE-2021-4200 MEDIUM
Component: rancher

A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. T...

📅 2022-05-02
CVSS 5.4 Dossier →
Component: rancher

A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affect...

📅 2022-05-02
CVSS 7.2 Dossier →
Component: rancher

A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their...

📅 2022-05-02
CVSS 7.3 Dossier →
Component: rancher_desktop

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API ...

📅 2022-04-01
CVSS 8.3 Dossier →
Component: rancher_k3s

K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidential keying...

📅 2021-07-28
CVSS 6.5 Dossier →
Component: linux_enterprise_server

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server...

📅 2021-07-28
CVSS 3.2 Dossier →
Component: arpwatch

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStac...

📅 2021-06-30
CVSS 7.8 Dossier →
Component: cups

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE Open...

📅 2021-05-05
CVSS 3.3 Dossier →
Component: hawk2

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise...

📅 2021-04-14
CVSS 7.8 Dossier →
Component: s390-tools

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attacke...

📅 2021-04-14
CVSS 3.3 Dossier →
Component: rancher

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute Jav...

📅 2021-03-05
CVSS 7.1 Dossier →
Page 2 of 9 (198 Total Records)