govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEMattermost Server vulnerable to XSS via an uploaded file6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server vulnerable to CSRF if CORS is enabled8.8 Highgovulncheck-vulndbopenSUSEMattermost Server exposes team invite IDs through API endpoints5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to DoS through maliciously crafted posts5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable CSV Injection9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server does not properly restrict use of slash commands8.8 Highgovulncheck-vulndbopenSUSEMattermost Server exposes sensitive user status information via REST API version 4 endpoint5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes team creator's e-mail address to other members5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to SQL Injection when executing multiple POST requests9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS through display name field6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server has intermittent Authorization bypass for resource-owners8.1 Highgovulncheck-vulndbopenSUSEMattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server mishandles redirect denial action6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server exposes private team invite ID5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to webhook and slash command manipulation4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows attackers to create buttons that can launch API requests4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server does not neutralize HTML content in an Email template field6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server does not safeguard against phishing via error page links6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes OAuth personal access tokens to attackers8.1 Highgovulncheck-vulndbopenSUSEMattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider9.1 Criticalgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS through author_link field in Slack attachments6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows users with a session ID to revoke another users' session4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to Directory Traversal by System Admins6.5 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to channel invisibility DoS via misformatted post5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names7.5 Highgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to Path Traversal when files are stored locally4.9 Mediumgovulncheck-vulndbopenSUSEMattermost Server does not prevent System Admin from arbitrary file creation4.9 Mediumgovulncheck-vulndbopenSUSEMattermost Server has mishandled webhook access control4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to a Denial of Service attack through `invite_people` command7.5 Highgovulncheck-vulndbopenSUSEKubernetes kube-controller-manager SSRF6.3 Mediumgovulncheck-vulndbopenSUSEPath Traversal in Buildah8.8 Highgovulncheck-vulndbopenSUSEKubernetes kubelet denial of service4.3 Mediumgovulncheck-vulndbopenSUSEkubectl cp allows symlink directory traversal4.8 Mediumgovulncheck-vulndbopenSUSEKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack7.5 Highgovulncheck-vulndbopenSUSEkubelet-started container uid changes to root after first restart or if image is already pulled to the node4.9 Mediumgovulncheck-vulndbopenSUSEcnlh nps vulnerable to file overwrite by local user5.5 Mediumgovulncheck-vulndbopenSUSEKubernetes did not effectively clear service account credentials3.1 Lowgovulncheck-vulndbopenSUSEkubectl cp path traversal6.4 Mediumgovulncheck-vulndbopenSUSEKubernetes DoS Vulnerability6.5 Mediumgovulncheck-vulndbopenSUSEHydra has Reflected XSS via error_hint parameter6.1 Mediumgovulncheck-vulndbopenSUSEKubernetes Arbitrary Command Injection5.9 Mediumgovulncheck-vulndbopenSUSEGo Ethereum Denial of Service7.5 Highgovulncheck-vulndbopenSUSEGo Ethereum Improper Input Validation7.5 Highgovulncheck-vulndbopenSUSEKubernetes arbitrary file overwrite4.2 Mediumgovulncheck-vulndbopenSUSEKubernetes arbitrary file overwrite7.1 Highgovulncheck-vulndbopenSUSEtar-split memory exhaustion6.5 Mediumgovulncheck-vulndbopenSUSEKubernetes in OpenShift3 Access Control Misconfiguration3.1 Low- Show moreLoading…