govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSETraefik: `allowCrossNamespace=false` bypass via `@kubernetescrd` TraefikService backendRef4.8 Mediumgovulncheck-vulndbSUSETraefik: Cross-user response poisoning via proxied CONNECT on Traefik's shared backend keep-alive pool7.0 Highgovulncheck-vulndbSUSErclone: Local Encoding Path Traversal6.9 Mediumgovulncheck-vulndbSUSErclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution8.0 Highgovulncheck-vulndbSUSErclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines6.4 Mediumgovulncheck-vulndbSUSErclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory5.9 Mediumgovulncheck-vulndbSUSErclone: Incomplete path validation allows backend root escape in serve restic8.6 Highgovulncheck-vulndbSUSEBuildKit: Possible runtime DoS via unbounded group parsing2.3 Lowgovulncheck-vulndbSUSESiYuan before v3.7.3 Path Traversal via unvalidated avID8.3 Highgovulncheck-vulndbSUSESiYuan before v3.7.3 SQL Injection via searchEmbedBlock9.9 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent9.9 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.3 Information Disclosure via getHeading*Transaction9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.3 Content Disclosure via getBacklinkDoc9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.3 Metadata Disclosure via getBlockInfo6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.3 Authentication Bypass via Content Endpoints9.2 Criticalgovulncheck-vulndbSUSETraefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass7.8 Highgovulncheck-vulndbSUSEPion STUN vulnerable to remote denial of service via panic while parsing a malformed XOR-MAPPED-ADDRESS attribute5.3 Mediumgovulncheck-vulndbSUSEsigstore-go fails to check signature timestamps against a signing key's validity period3.1 Lowgovulncheck-vulndbSUSEfree5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure6.9 Mediumgovulncheck-vulndbSUSEvault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API9.6 Criticalgovulncheck-vulndbSUSEWings: Maliciously crafted packet during SFTP connection handshake causes denial of service7.5 Highgovulncheck-vulndbSUSEWings exposes node configuration secrets through egg configuration-file templating9.9 Criticalgovulncheck-vulndbSUSEWings: Maliciously or erroneously created parsed config files can cause wings process to OOM5.5 Mediumgovulncheck-vulndbSUSECapsule: Incomplete fix of CVE-2026-22872: TenantResource RawItems and Generators still allow cluster-scoped resource creation (cross-tenant privilege escalation)6.6 Mediumgovulncheck-vulndbSUSECapsule: CapsuleConfiguration NodeMetadata regex fields lack webhook validation, allowing MustCompile panic on all Node admission requests6.8 Mediumgovulncheck-vulndbSUSEOliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output4.3 Mediumgovulncheck-vulndbSUSEOliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check6.6 Mediumgovulncheck-vulndbSUSEOliveTin: Unauthenticated DoS via OAuth2 State Memory Exhaustion (Unbounded Map Growth)7.5 Highgovulncheck-vulndbSUSELogging operator has Fluentd configuration injection that allows remote code execution9.9 Criticalgovulncheck-vulndbSUSEZITADEL Users Can Self-Verify Email/Phone via API8.2 Highgovulncheck-vulndbSUSEprebid-server's request forgery vulnerability allows for possible host environment data extraction10.0 Criticalgovulncheck-vulndbSUSEopenhole-server vulnerable to path traversal via URL-decoded request path8.6 Highgovulncheck-vulndbSUSEtd has pre-auth denial of service via unbounded memory allocation in proto.UnencryptedMessage.Decode7.5 Highgovulncheck-vulndbSUSEgoshs has ACL Bypass & Path Traversal5.3 Mediumgovulncheck-vulndbSUSEgoshs has a Path Traversal issue6.5 Mediumgovulncheck-vulndbSUSEgoshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite9.1 Criticalgovulncheck-vulndbSUSEgoshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of CVE-2026-40189)7.5 Highgovulncheck-vulndbSUSEgoshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)9.1 Criticalgovulncheck-vulndbSUSECosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server6.1 Mediumgovulncheck-vulndbSUSECosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens5.3 Mediumgovulncheck-vulndbSUSEGoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS6.9 Mediumgovulncheck-vulndbSUSEGoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)6.9 Mediumgovulncheck-vulndbSUSEPterodactyl's improper JWT scoping allows subuser to upload files when not explicitly granted `file.create` permissions8.1 Highgovulncheck-vulndbSUSEGitHub MCP Server: Nil Pointer Dereference DoS in completion/complete Handler7.5 Highgovulncheck-vulndbSUSEetcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline8.7 Highgovulncheck-vulndbSUSEkin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema5.3 Mediumgovulncheck-vulndbSUSEetcd: Watch API authorization bypass via open-ended range requests7.1 Highgovulncheck-vulndbSUSEOh My Posh: Arbitrary command execution via template injection in the path segment7.8 Highgovulncheck-vulndbSUSEOh My Posh: Terminal escape sequence injection via unsanitized prompt segment data6.1 Mediumgovulncheck-vulndbSUSEOpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal7.6 High- Show moreLoading…