govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEAckites KillWxapkg wxapkg File Decompression resource consumption2.3 Lowgovulncheck-vulndbopenSUSEAckites KillWxapkg wxapkg File Parser unpack.go processFile os command injection2.3 Lowgovulncheck-vulndbopenSUSEHubble CLI vulnerable to character injection5.3 Mediumgovulncheck-vulndbopenSUSEContainerd vulnerable to host filesystem access during image unpack7.6 Highgovulncheck-vulndbopenSUSEGardener vulnerable to metadata injection for a project secret that can lead to privilege escalation9.9 Criticalgovulncheck-vulndbopenSUSEBypassing project secret validation can lead to privilege escalation9.9 Criticalgovulncheck-vulndbopenSUSEMalicious google credential in DNS secret can lead to privilege escalation9.9 Criticalgovulncheck-vulndbopenSUSEGrafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin7.6 Highgovulncheck-vulndbopenSUSEImproper Validation of Array Index in ollama/ollama7.5 Highgovulncheck-vulndbopenSUSESeaweedFS Vulnerable to SQL Injection6.5 Mediumgovulncheck-vulndbopenSUSESystem Admin Cannot Access Environment settings in System Console While System Manager Can2.7 Lowgovulncheck-vulndbopenSUSEImproper access control to group information4.3 Mediumgovulncheck-vulndbopenSUSEMembers Without Guest Invite Permissions Can Add Guests to Teams4.3 Mediumgovulncheck-vulndbopenSUSERepeated LDAP login failures can lock an LDAP account5.8 Mediumgovulncheck-vulndbopenSUSEStored XSS in Configuration Key Functionality6.3 Mediumgovulncheck-vulndbopenSUSEYggdrasil: local privilege escalation in yggdrasil7.8 Highgovulncheck-vulndbopenSUSEAuthentication Bypass in OPKSSH9.3 Criticalgovulncheck-vulndbopenSUSEAuthentication Bypass in OpenPubKey9.3 Criticalgovulncheck-vulndbopenSUSEnosurf vulnerable to CSRF due to non-functional same-origin request checks6.0 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEImproper access to parent directory of root in os3.8 Lowgovulncheck-vulndbopenSUSEZITADEL Allows IdP Intent Token Reuse8.0 Highgovulncheck-vulndbopenSUSEgoshs route not protected, allows command execution9.4 Criticalgovulncheck-vulndbopenSUSETerraform WinDNS Provider improperly sanitizes input variables in `windns_record`1.1 Lowgovulncheck-vulndbopenSUSELinkerd resource exhaustion vulnerability6.5 Mediumgovulncheck-vulndbopenSUSEGrafana's datasource proxy API allows authorization checks to be bypassed5.0 Mediumgovulncheck-vulndbopenSUSEVault’s Azure Authentication Method bound_location Restriction Could be Bypassed on Login6.6 Mediumgovulncheck-vulndbopenSUSECasdoor SCIM User Creation Endpoint scim.go HandleScim authorization6.9 Mediumgovulncheck-vulndbopenSUSEVault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin4.5 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEOPA server Data API HTTP path injection of Rego7.4 Highgovulncheck-vulndbopenSUSEOpenFGA Authorization Bypass5.8 Mediumgovulncheck-vulndbopenSUSEVolcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin8.2 Highgovulncheck-vulndbopenSUSEKyverno vulnerable to bypass of policy rules that use namespace selectors in match statements8.6 Highgovulncheck-vulndbopenSUSEGo Snowflake Driver has race condition when checking access to Easy Logging configuration file3.3 Lowgovulncheck-vulndbopenSUSESteve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks8.0 Highgovulncheck-vulndbopenSUSEFleet doesn’t validate a server’s certificate when connecting through SSH6.3 Mediumgovulncheck-vulndbopenSUSERancher users who can create Projects can gain access to arbitrary projects8.5 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSECNCF K3s Kubernetes kubelet configuration exposes credentials6.8 Mediumgovulncheck-vulndbopenSUSEUnauthorized Playbooks Post Deletion in Mattermost Playbooks Plugin3.1 Lowgovulncheck-vulndbopenSUSEDoS in Mattermost Playbooks via Excessive Task Actions6.5 Mediumgovulncheck-vulndbopenSUSEWebapp DoS via malicious retrospective post in Playbooks6.5 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEMinio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS6.9 Mediumgovulncheck-vulndbopenSUSECilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters4.0 Mediumgovulncheck-vulndbopenSUSETraefik has a possible vulnerability with the path matchers8.8 Highgovulncheck-vulndbopenSUSEGoBGP does not verify that the input length6.8 Mediumgovulncheck-vulndbopenSUSEGoBGP crashes in the flowspec parser6.8 Mediumgovulncheck-vulndbopenSUSEGoBGP panics due to a zero value for softwareVersionLen8.6 High- Show moreLoading…