govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSECaddy: Windows `file_server` path authorization bypass via encoded backslash7.5 Highgovulncheck-vulndbSUSETraefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts7.8 Highgovulncheck-vulndbSUSETraefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass7.8 Highgovulncheck-vulndbSUSEBuildah: Build breakout using malicious Containerfile and Git Smart HTTP server or GitHub release tar archive6.3 Mediumgovulncheck-vulndbSUSEFilestash allows attackers to escalate privileges via sending a crafted request8.1 Highgovulncheck-vulndbSUSEstatping-ng allows attackers to escalate privileges to Administrator and access sensitive components8.8 Highgovulncheck-vulndbSUSElinx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request7.5 Highgovulncheck-vulndbSUSEMCP Toolbox for Databases has an Origin Validation Error9.4 Criticalgovulncheck-vulndbSUSECVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync7.6 Highgovulncheck-vulndbSUSEMattermost group syncable endpoints allow privilege escalation via scheme_admin8.8 Highgovulncheck-vulndbSUSEPlugin bot username conflict allows user account to be used as bot identity in Mattermost Server5.3 Mediumgovulncheck-vulndbSUSE*Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*4.3 Mediumgovulncheck-vulndbSUSEMattermost Remote Cluster PATCH API Leaks Authentication Tokens6.5 Mediumgovulncheck-vulndbSUSEMattermost: Delegated admins could patch protected default system roles6.7 Mediumgovulncheck-vulndbSUSEMattermost fails to scope role_updated websocket events to authorized team and channel members4.3 Mediumgovulncheck-vulndbSUSEFission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption8.5 Highgovulncheck-vulndbSUSEFission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks4.3 Mediumgovulncheck-vulndbSUSEFission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape3.6 Lowgovulncheck-vulndbSUSEFission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory7.7 Highgovulncheck-vulndbSUSEApache Answer: AdminToken not invalidated after admin deactivation7.2 Highgovulncheck-vulndbSUSEMigration-planner: getsourcedownloadurl missing organization check9.6 Criticalgovulncheck-vulndbSUSEAssisted-migration-agent: vddk tarball chained-symlink arbitrary file write9.6 Criticalgovulncheck-vulndbSUSEAssisted-migration-agent: tls verification disabled on all vcenter connections9.3 Criticalgovulncheck-vulndbSUSEMigration-planner: agent api ignores jwt source_id claim9.6 Criticalgovulncheck-vulndbSUSEMigration-planner: second-order sql injection via rvtools upload9.6 Criticalgovulncheck-vulndbSUSEMigration-planner: unprotected delete endpoint wipes all tenant data9.1 Criticalgovulncheck-vulndbSUSEApache Answer: Unlisted Questions Accessible via Direct API Access6.5 Mediumgovulncheck-vulndbSUSEApache Answer: HTML Content Injection in Email5.4 Mediumgovulncheck-vulndbSUSEApache Answer: The custom avatar was not properly validated6.5 Mediumgovulncheck-vulndbSUSEApache Answer: Uploading specially crafted TIFF files causes an Out-of-Memory error6.5 Mediumgovulncheck-vulndbSUSEApache Answer: Authorization Bypass in Timeline API6.1 Mediumgovulncheck-vulndbSUSEApache Answer: XSS in AI Answer Rendering6.1 Mediumgovulncheck-vulndbSUSEWeaviate Static API Key client.go validateConfig authorization2.3 Lowgovulncheck-vulndbSUSEyoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash2.0 Lowgovulncheck-vulndbSUSEyoanbernabeu grepai Qdrant Backend chunker.go weak hash2.3 Lowgovulncheck-vulndbSUSERclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix9.8 Criticalgovulncheck-vulndbSUSEsongquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error2.3 Lowgovulncheck-vulndbSUSEcilium ebpf LoadCollectionSpec/LoadCollectionSpecFromReader btf.go loadRawSpec integer overflow4.8 Mediumgovulncheck-vulndbSUSEGoBGP: Integer underflow in the BGPUpdate.DecodeFromBytes function7.5 Highgovulncheck-vulndbSUSENezha Monitoring: Authenticated agents can forge service-monitor results for other users' services7.1 Highgovulncheck-vulndbSUSEOpenTelemetry-Go's baggage parsing no longer caps raw header length5.3 Mediumgovulncheck-vulndbSUSEInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 Criticalgovulncheck-vulndbSUSEInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 Criticalgovulncheck-vulndbSUSEInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 Criticalgovulncheck-vulndbSUSEgo-git: Crafted repositories may modify main and submodule .git directories5.4 Mediumgovulncheck-vulndbSUSEMoby: Race condition in docker cp allows bind mount redirection to host path7.2 Highgovulncheck-vulndbSUSEMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap6.1 Mediumgovulncheck-vulndbSUSEiskorotkov/avro: CPU Exhaustion in Avro Decoder8.7 Highgovulncheck-vulndbSUSEiskorotkov/avro: Integer Overflow in Avro Decoder8.7 Highgovulncheck-vulndbSUSECaddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files8.1 High- Show moreLoading…