govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSENVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability9.0 Criticalgovulncheck-vulndbopenSUSEGrafana Agent Flow on Windows Unquoted service path7.3 Highgovulncheck-vulndbopenSUSEGrafana Alloy on Windows Unquoted service path7.3 Highgovulncheck-vulndbopenSUSEInformation Leakage in grafana-plugin-sdk-go9.1 Criticalgovulncheck-vulndbopenSUSEgnark's Groth16 commitment extension unsound for more than one commitment6.2 Mediumgovulncheck-vulndbopenSUSErunc can be confused to create empty files/directories on the host3.6 Lowgovulncheck-vulndbopenSUSEBMO can expose particularly named secrets from other namespaces via BMH CRD4.9 Mediumgovulncheck-vulndbopenSUSEOllama can extract members of a ZIP archive outside of the parent directory7.5 Highgovulncheck-vulndbopenSUSEcortex establishes TLS connections with `InsecureSkipVerify` set to `true`7.5 Highgovulncheck-vulndbopenSUSENetBird uses a static initialization vector (IV)7.5 Highgovulncheck-vulndbopenSUSENomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking7.7 Highgovulncheck-vulndbopenSUSEIncorrect permissions on Windows containers logs6.1 Mediumgovulncheck-vulndbopenSUSEMissing key verification in gost9.8 Criticalgovulncheck-vulndbopenSUSEDenial of service via malicious preflight requests in github.com/rs/cors7.5 Highgovulncheck-vulndbopenSUSEPingCAP TiDB nil pointer dereference5.4 Mediumgovulncheck-vulndbopenSUSERancher's External RoleTemplates can lead to privilege escalation7.5 Highgovulncheck-vulndbopenSUSEOllama does not validate the format of the digest (sha256 with 64 hex digits)8.8 Highgovulncheck-vulndbopenSUSEContainers/image: digest type does not guarantee valid type8.3 Highgovulncheck-vulndbopenSUSEKube-controller-manager: malformed hpa v1 manifest causes crash7.7 Highgovulncheck-vulndbopenSUSEResource Exhaustion via the Invitation Feature3.1 Lowgovulncheck-vulndbopenSUSEKubevirt-csi: persistentvolume allows access to hcp's root node6.5 Mediumgovulncheck-vulndbopenSUSEBeam Exposes sensitive information via joinCleanPath function6.0 Mediumgovulncheck-vulndbopenSUSEpubnub Insufficient Entropy vulnerability5.9 Mediumgovulncheck-vulndbopenSUSEKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation7.2 Highgovulncheck-vulndbopenSUSEDoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics7.5 Highgovulncheck-vulndbopenSUSEKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation8.8 Highgovulncheck-vulndbopenSUSEKubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation8.8 Highgovulncheck-vulndbopenSUSEWindows kube-proxy LoadBalancer contention5.8 Mediumgovulncheck-vulndbopenSUSESSH public key login without private key challenge if mfa is enabled in jumpserver5.4 Mediumgovulncheck-vulndbopenSUSEVault Key Partially Predetermined7.8 Highgovulncheck-vulndbopenSUSESSH as Root Unlockable Without Triggering Measured Boot8.8 Highgovulncheck-vulndbopenSUSEFreely Allocate Buffer on The Stack With Data From Socket9.0 Criticalgovulncheck-vulndbopenSUSEDebug Functions Unlockable Without Triggering Measured Boot8.8 Highgovulncheck-vulndbopenSUSEConfig Partition Not Protected by Measured Boot8.8 Highgovulncheck-vulndbopenSUSEVault Key Sealed With SHA1 PCRs8.8 Highgovulncheck-vulndbopenSUSERootfs Not Protected8.8 Highgovulncheck-vulndbopenSUSEConfig Partition Not Measured From 2 Fronts8.8 Highgovulncheck-vulndbopenSUSEJWT token compromise can allow malicious actions including Remote Code Execution (RCE)9.4 Criticalgovulncheck-vulndbopenSUSEBypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin6.5 Mediumgovulncheck-vulndbopenSUSEBypassing policies imposed by the ImagePolicyWebhook admission plugin6.5 Mediumgovulncheck-vulndbopenSUSEBypass of seccomp profile enforcement3.4 Lowgovulncheck-vulndbopenSUSEhjson stack exhaustion vulnerability7.5 Highgovulncheck-vulndbopenSUSEIO FinNet tss-lib vulnerable to replay attacks involving proofs6.8 Mediumgovulncheck-vulndbopenSUSErootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0 Mediumgovulncheck-vulndbopenSUSEAppArmor bypass with symlinked /proc in runc6.1 Mediumgovulncheck-vulndbopenSUSEOpencontainers runc Incorrect Authorization vulnerability7.0 Highgovulncheck-vulndbopenSUSENode address isn't always verified when proxying6.6 Mediumgovulncheck-vulndbopenSUSEUnauthorized read of Custom Resources6.5 Mediumgovulncheck-vulndbopenSUSEApache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection8.1 Highgovulncheck-vulndbopenSUSEMissing Role Based Access Control for the REST handlers in bleve/http package6.2 Medium- Show moreLoading…