govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEArbitrary file read via block duplication in Mattermost Boards9.9 Criticalgovulncheck-vulndbopenSUSEArbitrary file read in Mattermost Boards via import & export board archive9.9 Criticalgovulncheck-vulndbopenSUSESession Persistence After User-to-Bot Conversion3.1 Lowgovulncheck-vulndbopenSUSEChannel export permitted on archived channel when viewing archived channels is disabled4.3 Mediumgovulncheck-vulndbopenSUSEAn authenticated user can crash lakeFS by exhausting server memory6.5 Mediumgovulncheck-vulndbopenSUSEReflected Cross-site Scripting (XSS) in template implementation in oxyno-zeta/s3-proxy8.4 Highgovulncheck-vulndbopenSUSEHashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass8.2 Highgovulncheck-vulndbopenSUSEServer-Side Request Forgery (SSRF) in sliver teamserver6.9 Mediumgovulncheck-vulndbopenSUSEOpenFGA Authorization Bypass5.8 Mediumgovulncheck-vulndbopenSUSERegulation applies separately to Username-based logins to Email-based logins in authelia2.3 Lowgovulncheck-vulndbopenSUSE`gh attestation verify` returns incorrect exit code during verification if no attestations are present6.3 Mediumgovulncheck-vulndbopenSUSENode Denial of Service via kubelet Checkpoint API6.2 Mediumgovulncheck-vulndbopenSUSEBCryptGenerateSymmetricKey memory leak7.5 Highgovulncheck-vulndbopenSUSEField in api-go proxy not transformed before version 1.44.12.0 Lowgovulncheck-vulndbopenSUSEMaysWind ezBookkeeping has Improper Privilege Management9.8 Criticalgovulncheck-vulndbopenSUSEMissing rate limit in MaysWind ezBookkeeping6.3 Mediumgovulncheck-vulndbopenSUSEDistribution's token authentication allows attacker to inject an untrusted signing key in a JWT6.6 Mediumgovulncheck-vulndbopenSUSERemote code execution in Wazuh server9.9 Criticalgovulncheck-vulndbopenSUSEInsufficient sanitization of user provided rsync command in SFTPGo7.5 Highgovulncheck-vulndbopenSUSEPath traversal opening Sqlite3 database in WhoDB10.0 Criticalgovulncheck-vulndbopenSUSEParameter injection in DB connection URIs leading to local file inclusion in WhoDB8.6 Highgovulncheck-vulndbopenSUSEArbitrary code execution during build on darwin in cmd/go7.5 Highgovulncheck-vulndbopenSUSETiming sidechannel for P-256 on ppc64le in crypto/internal/nistec4.0 Mediumgovulncheck-vulndbopenSUSEPlenti - Code Injection - Denial of Services8.8 Highgovulncheck-vulndbopenSUSEImproper Access Control in wazuh-agent7.8 Highgovulncheck-vulndbopenSUSEAbility to view Agent list with no privilege access in wazuh-dashboard4.6 Mediumgovulncheck-vulndbopenSUSEMalicious peer can make node stuck in blocksync in github.com/cometbft/cometbft7.1 Highgovulncheck-vulndbopenSUSEGrafana Alerting VictorOps integration could be exposed to users with Viewer permission4.3 Mediumgovulncheck-vulndbopenSUSEgo-ethereum has a DoS via malicious p2p message8.7 Highgovulncheck-vulndbopenSUSEThe kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources6.5 Mediumgovulncheck-vulndbopenSUSEkubewarden-controller has an Information leak via AdmissionPolicyGroup Resource4.3 Mediumgovulncheck-vulndbopenSUSEArgo CD does not scrub secret values from patch errors6.8 Mediumgovulncheck-vulndbopenSUSEkube-audit-rest's example logging configuration could disclose secret values in the audit log5.1 Mediumgovulncheck-vulndbopenSUSEOpenshift-gitops-operator-container: namespace isolation break8.2 Highgovulncheck-vulndbopenSUSECri-o: cri-o path traversal in log handling functions allows arbitrary unmounting6.6 Mediumgovulncheck-vulndbopenSUSEVulnerability when creating log files in github.com/golang/glog7.1 Highgovulncheck-vulndbopenSUSEAnubis has a bot protection bypass when a sophisticated attacker asks to pass a challenge of difficulty 02.3 Lowgovulncheck-vulndbopenSUSEimgproxy is vulnerable to SSRF against 0.0.0.05.3 Mediumgovulncheck-vulndbopenSUSEUpdatecli may expose Maven credentials in console output7.1 Highgovulncheck-vulndbopenSUSEParsePKCS1PrivateKey panic with partial keys in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEGOAUTH credential leak in cmd/go8.8 Highgovulncheck-vulndbopenSUSEUsage of IPv6 zone IDs can bypass URI name constraints in crypto/x5096.1 Mediumgovulncheck-vulndbopenSUSEEnvoy Admin Interface Exposed through prometheus metrics endpoint7.1 Highgovulncheck-vulndbopenSUSECilium vulnerable to information leakage via insecure default Hubble UI CORS header6.5 Mediumgovulncheck-vulndbopenSUSEDoS in Cilium agent DNS proxy from crafted DNS responses5.3 Mediumgovulncheck-vulndbopenSUSEPodman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile8.6 Highgovulncheck-vulndbopenSUSEExcessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop5.9 Mediumgovulncheck-vulndbopenSUSEHashiCorp go-slug Vulnerable to Zip Slip Attack7.5 Highgovulncheck-vulndbopenSUSESensitive headers incorrectly sent after cross-domain redirect in net/http6.1 Mediumgovulncheck-vulndbopenSUSEInsecure default config access in WriteFreely8.4 High- Show moreLoading…