govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEGoBGP does not properly check the input length4.3 Mediumgovulncheck-vulndbopenSUSEsongquanpeng one-api System Setting cross site scripting4.8 Mediumgovulncheck-vulndbopenSUSEIncorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net6.5 Mediumgovulncheck-vulndbopenSUSEUnauthorized View Access to Archived Channel Member Info4.3 Mediumgovulncheck-vulndbopenSUSEWebhook Secret Exposure via Timing attack in MSteams plugin5.3 Mediumgovulncheck-vulndbopenSUSEData exfiltration via AI plugin Jira tool3.0 Lowgovulncheck-vulndbopenSUSEChannel metadata visible in archived channels despite configuration setting4.3 Mediumgovulncheck-vulndbopenSUSEMFA Enforcement Bypass Allows Unauthorized Removal of MFA for Other Users2.2 Lowgovulncheck-vulndbopenSUSEUnauthorized AI bot activation via Wrangler plugin3.1 Lowgovulncheck-vulndbopenSUSENATS-Server Fails to Authorize Certain Jetstream Admin APIs9.6 Criticalgovulncheck-vulndbopenSUSEDpanel's hard-coded JWT secret leads to remote code execution9.8 Criticalgovulncheck-vulndbopenSUSEUsers can gain privileged access to the host system and cluster with EventSource and Sensor CR10.0 Criticalgovulncheck-vulndbopenSUSEgorilla/csrf CSRF vulnerability due to broken Referer validation5.4 Mediumgovulncheck-vulndbopenSUSEUnauthorized Bot Login Using Credentials5.4 Mediumgovulncheck-vulndbopenSUSELeaked Metadata of Deleted Files via Bookmark Creation3.1 Lowgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSESyatem admin profile modification by delegated granular administration role4.7 Mediumgovulncheck-vulndbopenSUSEmholt/archiver Vulnerable to Path Traversal via Crafted ZIP File8.1 Highgovulncheck-vulndbopenSUSEQuery smuggling in ch-go library5.9 Mediumgovulncheck-vulndbopenSUSEUnauthorized Access to User Activity Logs API by delegated granular administration roles2.7 Lowgovulncheck-vulndbopenSUSEHelm Allows A Specially Crafted Chart Archive To Cause Out Of Memory Termination6.5 Mediumgovulncheck-vulndbopenSUSEHelm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow6.5 Mediumgovulncheck-vulndbopenSUSEbep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing6.9 Mediumgovulncheck-vulndbopenSUSEbep/imagemeta allows excessively large EXIF data structures6.9 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEMinIO performs incomplete signature validation for unsigned-trailer uploads8.7 Highgovulncheck-vulndbopenSUSEStored XSS in Miniflux Media Proxy due to improper Content-Security-Policy configuration4.8 Mediumgovulncheck-vulndbopenSUSERequest smuggling due to acceptance of invalid chunked data in net/http9.1 Criticalgovulncheck-vulndbopenSUSETempo-operator: tempo operator token exposition lead to read sensitive data4.3 Mediumgovulncheck-vulndbopenSUSETempo-operator: serviceaccount token exposure leading to token and subject access reviews in openshift tempo operator4.3 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEGo-Guerrilla SMTP Daemon allows the PROXY command to be sent multiple times5.3 Mediumgovulncheck-vulndbopenSUSERancher: Restricted Administrator can change Administrator's passwords9.1 Criticalgovulncheck-vulndbopenSUSEApache Answer: Using externally referenced images can leak user privacy.6.5 Mediumgovulncheck-vulndbopenSUSEBeego allows Reflected/Stored XSS in Beego's RenderForm() Function Due to Unescaped User Input9.3 Criticalgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSENethermind Juno Potential Denial of Service (DoS) via Integer Overflow7.5 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEingress-nginx controller - configuration injection via unsanitized auth-url annotation8.8 Highgovulncheck-vulndbopenSUSEingress-nginx controller - auth secret file path traversal vulnerability4.8 Mediumgovulncheck-vulndbopenSUSEingress-nginx controller - configuration injection via unsanitized mirror annotations8.8 Highgovulncheck-vulndbopenSUSEingress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation8.8 Highgovulncheck-vulndbopenSUSEingress-nginx admission controller RCE escalation9.8 Criticalgovulncheck-vulndbopenSUSENode based network policies may incorrectly allow workload traffic3.4 Lowgovulncheck-vulndbopenSUSEEast-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers3.2 Lowgovulncheck-vulndbopenSUSEKyverno ignores subjectRegExp and IssuerRegExp5.8 Mediumgovulncheck-vulndbopenSUSEjwt-go allows excessive memory allocation during header parsing7.5 Highgovulncheck-vulndbopenSUSELibcontainer is affected by capabilities elevation5.9 Mediumgovulncheck-vulndbopenSUSEBypassing MFA Enforcement on Plugin Endpoints7.5 Highgovulncheck-vulndbopenSUSEUnauthorized Bookmark Creation and Modification in Archived Channels4.3 Medium- Show moreLoading…