govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSESiYuan: SQL Query in Block Search Exposes Hidden Published Document Content7.5 Highgovulncheck-vulndbSUSErclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories8.8 Highgovulncheck-vulndbSUSErclone archive extract allows S3 destination prefix escape via crafted archive paths5.0 Mediumgovulncheck-vulndbSUSErclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote7.5 Highgovulncheck-vulndbSUSEPortainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances7.1 Highgovulncheck-vulndbSUSESeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets4.3 Mediumgovulncheck-vulndbSUSESeaweedFS: Path traversal in the S3 gateway X-Amz-Copy-Source header allows cross-bucket object read7.7 Highgovulncheck-vulndbSUSEDgraph Alpha group stores can be replaced via unauthenticated external snapshot import9.1 Criticalgovulncheck-vulndbSUSEFiber: HSTS header never set in helmet middleware due to incorrect protocol check4.8 Mediumgovulncheck-vulndbSUSETraefik: headerField underscore-variant identity spoofing in BasicAuth / DigestAuth / ForwardAuth7.8 Highgovulncheck-vulndbSUSETraefik: Gateway HTTPRoute backendRef filters can leak backend context across routes sharing a Service:port6.3 Mediumgovulncheck-vulndbSUSEForwardAuth middleware leaks X-Forwarded-Port spoofing via untrusted X-Forwarded-Proto when trustForwardHeader=false6.9 Mediumgovulncheck-vulndbSUSEGitea Actions Artifacts V4 signed URL HMAC ambiguity allows cross-repository artifact read and cross-task upload-state write9.6 Criticalgovulncheck-vulndbSUSEUnauthenticated ReDoS via CODEOWNERS pattern matching allows denial of service7.5 Highgovulncheck-vulndbSUSESSRF via HTTP Redirect in Repository Migration6.5 Mediumgovulncheck-vulndbSUSEGitea repository dumps write release assets using unsafe path names5.3 Mediumgovulncheck-vulndbSUSEGitea pre-receive hook can miss branch-protection checks after scanner errors9.8 Criticalgovulncheck-vulndbSUSEGitea forwarded-proto handling allows public URL spoofing7.5 Highgovulncheck-vulndbSUSEGitea draft releases use insufficient permission checks7.5 Highgovulncheck-vulndbSUSEGitea email settings allow changing another user's primary email address7.5 Highgovulncheck-vulndbSUSEGitea git grep search lacks a timeout7.5 Highgovulncheck-vulndbSUSEGitea LFS mirror synchronization bypasses migration HTTP transport restrictions9.8 Criticalgovulncheck-vulndbSUSEGitea OAuth2 PKCE S256 challenges are not enforced during token exchange9.1 Criticalgovulncheck-vulndbSUSEGitea OAuth2 authorization codes lack expiry and reuse enforcement9.1 Criticalgovulncheck-vulndbSUSEGitea tracked-time deletion can target entries from another issue5.3 Mediumgovulncheck-vulndbSUSEGitea template repository generation mishandles symlinked paths9.1 Criticalgovulncheck-vulndbSUSEGitea organization permission APIs expose private visibility information7.5 Highgovulncheck-vulndbSUSEGitea private organization labels are visible to unauthorized users7.5 Highgovulncheck-vulndbSUSEGitea pull-request branch updates use insufficient permission checks7.5 Highgovulncheck-vulndbSUSEGitea fork synchronization can expose private parent repository data7.5 Highgovulncheck-vulndbSUSEGitea repository creation accepts invalid field values9.1 Criticalgovulncheck-vulndbSUSEGitea tracked-time list endpoint has insufficient permission checks5.3 Mediumgovulncheck-vulndbSUSEFiber: X-Real-IP Spoofing via Header.Add() in BalancerForward5.3 Mediumgovulncheck-vulndbSUSEFiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer5.3 Mediumgovulncheck-vulndbSUSEoras-go: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution in `oras-go` tar extraction7.1 Highgovulncheck-vulndbSUSEoras-go: file store write outside workingDir via symlink traversal6.9 Mediumgovulncheck-vulndbSUSEoras-go: credential forwarding via unvalidated Location header in blob upload7.5 Highgovulncheck-vulndbSUSEoras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens2.1 Lowgovulncheck-vulndbSUSEPion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message6.3 Mediumgovulncheck-vulndbSUSEPath Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder9.3 Criticalgovulncheck-vulndbSUSEEcho: Encoded slash (%2F) bypasses route-level protection and exposes static files7.5 Highgovulncheck-vulndbSUSESeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access7.8 Highgovulncheck-vulndbSUSETrivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser6.9 Mediumgovulncheck-vulndbSUSETrivy: Path traversal via a crafted vulnerability database or other downloaded artifacts7.0 Highgovulncheck-vulndbSUSEAuthenticated Arbitrary File Write via Database Import and Xray Log Path Manipulation7.2 Highgovulncheck-vulndbSUSEGophish 0.12.1 Denial of Service via Office Document Upload7.1 Highgovulncheck-vulndbSUSETempo TraceQL query with exemplar hint could result in unbounded memory usage6.5 Mediumgovulncheck-vulndbSUSEHeimdall: IP Spoofing via Unvalidated Forwarding Headers7.0 Highgovulncheck-vulndbSUSECaddy: stripHTML template function bypass4.2 Mediumgovulncheck-vulndbSUSECaddy: FastCGI header normalization bypass in `forward_auth copy_headers`8.1 High- Show moreLoading…