govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEunstructured XML External Entity (XXE)9.8 Criticalgovulncheck-vulndbopenSUSElxd has a restricted TLS certificate privilege escalation when in PKI mode3.8 Lowgovulncheck-vulndbopenSUSElxd CA certificate sign check bypass3.8 Lowgovulncheck-vulndbopenSUSEGitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability6.3 Mediumgovulncheck-vulndbopenSUSEKolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)7.3 Highgovulncheck-vulndbopenSUSEVitess allows HTML injection in /debug/querylogz & /debug/env4.9 Mediumgovulncheck-vulndbopenSUSEAn issue in mochiMQTT v2.6.3 allows attackers to cause a Denial of Service (DoS) via a crafted...7.5 Highgovulncheck-vulndbopenSUSEquic-go affected by an ICMP Packet Too Large Injection Attack on Linux6.5 Mediumgovulncheck-vulndbopenSUSEArgo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode6.3 Mediumgovulncheck-vulndbopenSUSEBrute force takeover of OpenID Connect session cookies in sftpgo5.3 Mediumgovulncheck-vulndbopenSUSEX-Forwarded-Prefix Header still allows for Open Redirect in traefik6.3 Mediumgovulncheck-vulndbopenSUSEMoby Race Condition vulnerability8.1 Highgovulncheck-vulndbopenSUSEMoby Race Condition vulnerability6.5 Mediumgovulncheck-vulndbopenSUSENULL Pointer Dereference on moby image history6.5 Mediumgovulncheck-vulndbopenSUSERecursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli6.5 Mediumgovulncheck-vulndbopenSUSEgo-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace6.5 Mediumgovulncheck-vulndbopenSUSEOpen Redirect Vulnerability in Loading Page in bunkerweb5.1 Mediumgovulncheck-vulndbopenSUSERe-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion5.7 Mediumgovulncheck-vulndbopenSUSECri-o: checkpoint restore can be triggered from different namespaces7.4 Highgovulncheck-vulndbopenSUSELayer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium5.8 Mediumgovulncheck-vulndbopenSUSEOpenshift-console: openshift console: server-side request forgery5.3 Mediumgovulncheck-vulndbopenSUSEArbitrary command execution through gitRepo volume8.1 Highgovulncheck-vulndbopenSUSEApache Answer: Predictable Authorization Token Using UUIDv12.6 Lowgovulncheck-vulndbopenSUSESFTPGo allows administrators to restrict command execution from the EventManager5.1 Mediumgovulncheck-vulndbopenSUSEGoCast OS Command Injection vulnerability9.8 Criticalgovulncheck-vulndbopenSUSECert-manager: potential dos when parsing specially crafted pem inputs4.4 Mediumgovulncheck-vulndbopenSUSERancher Helm Applications may have sensitive values leaked6.2 Mediumgovulncheck-vulndbopenSUSEUsers can issue watch commands for arbitrary resources7.7 Highgovulncheck-vulndbopenSUSEStored XSS in Kubeflow Pipeline View7.1 Highgovulncheck-vulndbopenSUSERclone Improper Permission and Ownership Handling on Symlink Targets with --links and --metadata5.4 Mediumgovulncheck-vulndbopenSUSEStored XSS in usememos/memos9.8 Criticalgovulncheck-vulndbopenSUSERemote Code Execution in Gogs8.8 Highgovulncheck-vulndbopenSUSEReachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0...7.5 Highgovulncheck-vulndbopenSUSEMagma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the...6.5 Mediumgovulncheck-vulndbopenSUSEConnecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer8.0 Highgovulncheck-vulndbopenSUSEUser permission validation failure and disclosure of P2P preheat execution logs7.4 Highgovulncheck-vulndbopenSUSEPodman: build context bind mount7.4 Highgovulncheck-vulndbopenSUSEZoraxy has an authenticated command injection in the Web SSH feature8.6 Highgovulncheck-vulndbopenSUSEGit credentials are exposed in atlantis logs8.5 Highgovulncheck-vulndbopenSUSENomad Vulnerable To Cross-Namespace Volume Creation Abusing CSI Write Permission7.7 Highgovulncheck-vulndbopenSUSESQL Injection in CreateUser API in devtron8.3 Highgovulncheck-vulndbopenSUSEUse of incorrect Rekor entries during verification in gitsign1.8 Lowgovulncheck-vulndbopenSUSEStored Cross-site Scripting to RCE on Osmedeus Web Server8.7 Highgovulncheck-vulndbopenSUSEBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 Lowgovulncheck-vulndbopenSUSEPath Traversal in Safearchive5.9 Mediumgovulncheck-vulndbopenSUSELocalAI Cross-site Scripting vulnerability6.1 Mediumgovulncheck-vulndbopenSUSEOut-of-memory during deserialization with crafted inputs5.5 Mediumgovulncheck-vulndbopenSUSEVault Vulnerable to Denial of Service When Processing Raft Join Requests7.5 Highgovulncheck-vulndbopenSUSEOllama Out-of-bounds Read8.2 Highgovulncheck-vulndbopenSUSEConsul Vulnerable To Reflected XSS On Content-Type Error Manipulation6.1 Medium- Show moreLoading…