govulncheck-vulndb vulnerabilities (SUSE)
687 vulnerabilities.
govulncheck-vulndbSUSEAuthorizer: Zero-click account takeover via OAuth identity linking to unverified email accounts8.7 Highgovulncheck-vulndbSUSESiYuan before v3.7.4 Missing Authorization via refreshBacklink6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 SQL Injection via backlink search9.9 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.4 Publish-Boundary Bypass via WebSocket9.2 Criticalgovulncheck-vulndbSUSEOpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs9.6 Criticalgovulncheck-vulndbSUSEOpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation9.0 Criticalgovulncheck-vulndbSUSEOpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints8.8 Highgovulncheck-vulndbSUSEOpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion (webhook signature bypass)5.3 Mediumgovulncheck-vulndbSUSEFix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog8.4 Highgovulncheck-vulndbSUSEIgnore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5 Highgovulncheck-vulndbSUSELimit handshake messages we are willing to accept post-handshake in crypto/tls7.5 Highgovulncheck-vulndbSUSEAvoid quadratic complexity in resolvePath in net/url5.9 Mediumgovulncheck-vulndbSUSEAdd recursion depth guard during decode in encoding/xml7.5 Highgovulncheck-vulndbSUSEFix Javascript regexp context tracking in html/template6.1 Mediumgovulncheck-vulndbSUSEApply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5 Highgovulncheck-vulndbSUSEEnforce maximum recursion depth in encoding/asn17.5 Highgovulncheck-vulndbSUSEOpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods8.8 Highgovulncheck-vulndbSUSESiYuan before v3.7.4 Authentication Bypass via Localhost Trust7.1 Highgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via getFileAnnotation6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 SQL Injection via queryBlocks template8.8 Highgovulncheck-vulndbSUSESiYuan before v3.7.4 Authentication Bypass via Attribute View6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Block Endpoints6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Authentication Bypass via Graph Endpoints9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via getBlockAttrs6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via resolveAssetPath6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Encryption Key Material8.7 Highgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Unfiltered API6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Path Resolution6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via renderAttributeView9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via getEncryptedNotebookStatus6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Access Control Bypass via Static Routes6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Embed Block9.2 Criticalgovulncheck-vulndbSUSEsiyuan before v3.7.4 Session Cookie Key Disclosure via getConf9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via /api/system/getConf9.2 Criticalgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via Tag API6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Information Disclosure via getNotebookInfo6.9 Mediumgovulncheck-vulndbSUSESiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks9.2 Criticalgovulncheck-vulndbSUSESemaphore U: OS Command Injection9.9 Criticalgovulncheck-vulndbSUSESemaphore UI: Manager-to-owner privilege escalation via custom-role slug collision8.8 Highgovulncheck-vulndbSUSESemaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation8.3 Highgovulncheck-vulndbSUSEFleet: Observer-class users can view team enroll secrets and credential-bearing configuration via target search endpoint6.5 Mediumgovulncheck-vulndbSUSEffuf denial of service (OOM) via HTTP response decompression bomb7.5 Highgovulncheck-vulndbSUSEDozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher2.3 Lowgovulncheck-vulndbSUSESeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle9.3 Criticalgovulncheck-vulndbSUSESeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths8.1 Highgovulncheck-vulndbSUSESeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control9.8 Criticalgovulncheck-vulndbSUSEgo-git: Malicious reference names may modify files outside the reference storage6.3 Mediumgovulncheck-vulndbSUSEgo-git: Worktree operations may follow symlinks7.1 Highgovulncheck-vulndbSUSETraefik: Gateway API route identity collision allows cross-namespace backend hijacking7.6 Highgovulncheck-vulndbSUSETraefik: BasicAuth singleflight key collision allows authenticated identity spoofing2.1 Low- Show moreLoading…