govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEIdP group membership revocation ignored in zot7.3 Highgovulncheck-vulndbopenSUSEServer-Side Request Forgery (SSRF) on redirects and federation in Matrix Media Repo5.0 Mediumgovulncheck-vulndbopenSUSEUntrusted file formats can be thumbnailed, invoking potentially further untrusted decoders in Matrix Media Repo6.8 Mediumgovulncheck-vulndbopenSUSEDenial of service through memory exhaustion in Matrix Media Repo5.3 Mediumgovulncheck-vulndbopenSUSEDenial of service/high operating costs through unauthenticated downloads in Matrix Media Repo5.3 Mediumgovulncheck-vulndbopenSUSEUnauthenticated writes to the media repository allow planting of problematic content in Matrix Media Repo5.3 Mediumgovulncheck-vulndbopenSUSEServer-Side Request Forgery (SSRF) on redirects and federation in gomatrixserverlib4.3 Mediumgovulncheck-vulndbopenSUSEWebapp crash via object that can't be cast to String in Attachment Field6.5 Mediumgovulncheck-vulndbopenSUSEInsufficient Input Validation on Post Props6.5 Mediumgovulncheck-vulndbopenSUSEInsufficient Input Validation on Post Props6.5 Mediumgovulncheck-vulndbopenSUSEWebApp crash via improper validation of proto style in attachments6.5 Mediumgovulncheck-vulndbopenSUSEStored Cross-site Scripting vulnerability in Rancher UI8.9 Highgovulncheck-vulndbopenSUSEGit LFS permits exfiltration of credentials via crafted HTTP URLs8.5 Highgovulncheck-vulndbopenSUSEOpenFGA Authorization Bypass5.8 Mediumgovulncheck-vulndbopenSUSETimestamp signature generation lacks certificate revocation check in notion-go4.0 Mediumgovulncheck-vulndbopenSUSEProcess crash during CRL-based revocation check on OS using separate mount point for temp Directory in notation-go3.3 Lowgovulncheck-vulndbopenSUSEJWK Set's HTTP client only overwrites and appends JWK to local cache during refresh2.1 Lowgovulncheck-vulndbopenSUSEMisleading UI for undefined admin console settings in Calls causes security confusion3.5 Lowgovulncheck-vulndbopenSUSEDoS via custom post type for sysconsole plugin readers4.3 Mediumgovulncheck-vulndbopenSUSEAccess control flaw for team admins allows unauthorized team additions3.8 Lowgovulncheck-vulndbopenSUSESoft Serve allows path traversal attacks5.3 Mediumgovulncheck-vulndbopenSUSEgo-git clients vulnerable to DoS via maliciously crafted Git server replies7.5 Highgovulncheck-vulndbopenSUSEgo-git has an Argument Injection via the URL field9.2 Criticalgovulncheck-vulndbopenSUSESiYuan has an arbitrary file deletion vulnerability8.7 Highgovulncheck-vulndbopenSUSEKarmada Tar Slips in CRDs archive extraction5.3 Mediumgovulncheck-vulndbopenSUSEKarmada PULL Mode Cluster Privilege Escalation8.7 Highgovulncheck-vulndbopenSUSEOpenshift-dedicated: hive: rce through aws/kubernetes client configuration leads to privilege escalation8.8 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSENavidrome Stores JWT Secret in Plaintext in navidrome.db7.1 Highgovulncheck-vulndbopenSUSEApache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments9.9 Criticalgovulncheck-vulndbopenSUSEGogs has a Path Traversal in file update API8.7 Highgovulncheck-vulndbopenSUSEGogs has a Path Traversal in file editing UI8.7 Highgovulncheck-vulndbopenSUSENomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens6.5 Mediumgovulncheck-vulndbopenSUSEOpenshift-dedicated: must-gather-operator: yaml template injection leads to privilege escalation8.8 Highgovulncheck-vulndbopenSUSEGoPhish sends cleartext passwords7.5 Highgovulncheck-vulndbopenSUSENon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 Mediumgovulncheck-vulndbopenSUSEOpen-cluster-management-io/ocm: cluster-manager permissions may allow a worker node to obtain service account tokens7.5 Highgovulncheck-vulndbopenSUSEPrivilege escalation in IAM import API in MinIO9.3 Criticalgovulncheck-vulndbopenSUSEZipbomb DoS via Missing Slack Import Validation6.5 Mediumgovulncheck-vulndbopenSUSEDoS via lack of type validation in Calls6.5 Mediumgovulncheck-vulndbopenSUSEBypass of "Max failed attempts" restriction via race condition4.8 Mediumgovulncheck-vulndbopenSUSEBoundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of Service5.9 Mediumgovulncheck-vulndbopenSUSEBeego Vulnerable to Collision Hazards of MD5 in Cache Key Filenames6.9 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSESiYuan has an arbitrary file read via /api/template/render8.7 Highgovulncheck-vulndbopenSUSESiYuan has an arbitrary file read and path traversal via /api/export/exportResources8.7 Highgovulncheck-vulndbopenSUSESiYuan has an arbitrary file write in the host via /api/asset/upload8.7 Highgovulncheck-vulndbopenSUSESiYuan has an SSTI via /api/template/renderSprig6.9 Mediumgovulncheck-vulndbopenSUSEMisuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto9.1 Criticalgovulncheck-vulndbopenSUSEHugo does not escape some attributes in internal templates5.3 Medium- Show moreLoading…