govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEDoS via malicious p2p message in Go-Ethereum5.9 Mediumgovulncheck-vulndbopenSUSEIncorrect Default Permissions in runc5.9 Mediumgovulncheck-vulndbopenSUSEBypass of Kubernetes API Server proxy TOCTOU2.2 Lowgovulncheck-vulndbopenSUSEANSI escape characters in kubectl output are not being filtered3.0 Lowgovulncheck-vulndbopenSUSESymlink Exchange Can Allow Host Filesystem Access8.8 Highgovulncheck-vulndbopenSUSEHoles in EndpointSlice Validation Enable Host Network Hijack2.7 Lowgovulncheck-vulndbopenSUSERancher: Cloud credentials can be used through proxy API by users without access9.9 Criticalgovulncheck-vulndbopenSUSEValidating Admission Webhook does not observe some previous fields6.5 Mediumgovulncheck-vulndbopenSUSEmount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs8.5 Highgovulncheck-vulndbopenSUSEIncorrect authorization in OAuth2-Proxy5.5 Mediumgovulncheck-vulndbopenSUSESecret leaks in logs for vSphere Provider kube-controller-manager4.7 Mediumgovulncheck-vulndbopenSUSECeph RBD adminSecrets exposed in logs when loglevel >= 44.7 Mediumgovulncheck-vulndbopenSUSEErroneous Proof of Work calculation in geth5.3 Mediumgovulncheck-vulndbopenSUSEShallow copy bug in geth6.5 Mediumgovulncheck-vulndbopenSUSEIO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library9.8 Criticalgovulncheck-vulndbopenSUSEIn-band key negotiation issue in AWS S3 Crypto SDK for GoLang2.5 Lowgovulncheck-vulndbopenSUSECBC padding oracle in AWS S3 Crypto SDK for GoLang5.6 Mediumgovulncheck-vulndbopenSUSEKubernetes node setting allows for neighboring hosts to bypass localhost boundary5.4 Mediumgovulncheck-vulndbopenSUSEKubernetes node disk Denial of Service by writing to container /etc/hosts5.5 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows XSS via CSRF6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server: Files may be rendered inline instead of downloaded, allowing script execution6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS through crafted links6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes information stored by a web browser4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes account details to any Team Administrator4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows XSS via redirect URL6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes sensitive information via its System Console UI6.5 Mediumgovulncheck-vulndbopenSUSEMattermost Server allows System Admin to modify LDAP account names and email addresses2.7 Lowgovulncheck-vulndbopenSUSEMattermost Server does not check if cookies are used over SSL5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes sensitive information about team URLs via an API5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server: Insufficient Password-Reset Link Invalidation9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS via a Legal or Support setting6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server's Session ID and Session Token are potentially compromised6.5 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS through lack of link relationship attributes `noreferrer` and `noopener`6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to XSS through customizable theme color-code values5.4 Mediumgovulncheck-vulndbopenSUSEMattermost Server does not enforce rate limits on password change attempts7.5 Highgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to Code Injection through its LDAP fields5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server is vulnerable to Uncontrolled Resource Consumption5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server: initial_load API exposes unnecessary information7.5 Highgovulncheck-vulndbopenSUSEMattermost Server vulnerable to Cross-site Scripting through file preview feature6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server does not restrict SAML certificate path for System Administrators4.9 Mediumgovulncheck-vulndbopenSUSEMattermost Server vulnerable to XSS through channel headers6.1 Mediumgovulncheck-vulndbopenSUSEMattermost Server has Improper Authorization for Integration Requests5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server uses weak hashing for OAuth, email verification tokens and invitations7.5 Highgovulncheck-vulndbopenSUSEMattermost Server vulnerable to user account takeover when Single Sign-On OAuth2 is used8.1 Highgovulncheck-vulndbopenSUSEMattermost Server has Insufficient Session Expiration when used as an OAuth 2.0 service provider5.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server password reset email requests can be sent to attacker-provided email addresses9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server server restarts may provide attackers with API access9.8 Criticalgovulncheck-vulndbopenSUSEMattermost Server SAML implementation does not require encryption or signature verification as default7.5 Highgovulncheck-vulndbopenSUSEMattermost Server has X.509 Improper Certificate Validation9.1 Criticalgovulncheck-vulndbopenSUSEMattermost Server allows an attacker to specify a full pathname of a log file9.8 Critical- Show moreLoading…