govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEGogs deletion of internal files allows remote command execution10.0 Criticalgovulncheck-vulndbopenSUSENodes can bypass dynamic resource allocation authorization checks2.7 Lowgovulncheck-vulndbopenSUSEUnauthorized Guest user access to Playbook4.3 Mediumgovulncheck-vulndbopenSUSEUnauthorized channel member management through playbook runs4.3 Mediumgovulncheck-vulndbopenSUSEPath Traversal Leading to RCE by Any Authenticated Mattermost User9.9 Criticalgovulncheck-vulndbopenSUSEVelociraptor priviledge escalation via UpdateConfig artifact5.5 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEVery long unicode dashboard title or panel name can hang the frontend2.7 Lowgovulncheck-vulndbopenSUSEArbitrary File write in OSV-SCALIBR5.7 Mediumgovulncheck-vulndbopenSUSETeleport allows remote authentication bypass9.8 Criticalgovulncheck-vulndbopenSUSEImproper Permission Management in SSH Session Handling8.5 Highgovulncheck-vulndbopenSUSEuptrace pgdriver SQL injection vulnerability6.5 Mediumgovulncheck-vulndbopenSUSEgo-pg SQL injection vulnerability via the component /types/append_value.go6.5 Mediumgovulncheck-vulndbopenSUSENomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job8.1 Highgovulncheck-vulndbopenSUSEMattermost Guest User Information Disclosure Vulnerability3.1 Lowgovulncheck-vulndbopenSUSELDAP Injection in Mattermost Enterprise Edition When Using Active Directory4.1 Mediumgovulncheck-vulndbopenSUSEPion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)7.5 Highgovulncheck-vulndbopenSUSESensitive headers not cleared on cross-origin redirect in net/http6.8 Mediumgovulncheck-vulndbopenSUSEUsage of ExtKeyUsageAny disables policy validation in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEInconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall5.5 Mediumgovulncheck-vulndbopenSUSElistmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user9.1 Criticalgovulncheck-vulndbopenSUSERhcl: authorino denial of service through authpolicy with sharedsecretref severity5.7 Mediumgovulncheck-vulndbopenSUSERhcl: authpolicy callbacks result in denial of service in authorino severity5.7 Mediumgovulncheck-vulndbopenSUSESpiceDB checks involving relations with caveats can result in no permission when permission is expected3.7 Lowgovulncheck-vulndbopenSUSECoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification7.5 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEkro Confused Deputy vulnerability4.1 Mediumgovulncheck-vulndbopenSUSEGokapi has stored XSS vulnerability in friendly name for API keys4.8 Mediumgovulncheck-vulndbopenSUSEGokapi vulnerable to stored XSS via uploading file with malicious file name4.8 Mediumgovulncheck-vulndbopenSUSEquic-go Has Panic in Path Probe Loss Recovery Handling7.5 Highgovulncheck-vulndbopenSUSEGrafana vulnerable to authenticated users bypassing dashboard, folder permissions8.3 Highgovulncheck-vulndbopenSUSEPrevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server2.6 Lowgovulncheck-vulndbopenSUSEImproper Access Control in Mattermost allows System Managers to view team details despite role restrictions3.1 Lowgovulncheck-vulndbopenSUSEBypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Server5.4 Mediumgovulncheck-vulndbopenSUSEGoogle OAuth Authentication Bypass for Converted Bot Accounts4.2 Mediumgovulncheck-vulndbopenSUSEImproper Access Control in Mattermost Channel Member API3.1 Lowgovulncheck-vulndbopenSUSENavidrome Transcoding Permission Bypass Vulnerability Report7.4 Highgovulncheck-vulndbopenSUSENavidrome allows SQL Injection via role parameter8.9 Highgovulncheck-vulndbopenSUSEFabio allows HTTP clients to manipulate custom headers it adds9.1 Criticalgovulncheck-vulndbopenSUSETeam Privacy Settings Authorization Bypass in Mattermost Server5.3 Mediumgovulncheck-vulndbopenSUSEArgo CD allows cross-site scripting on repositories page9.1 Criticalgovulncheck-vulndbopenSUSETraefik allows path traversal using url encoding2.9 Lowgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEActivemq-artemis-operator: amq broker operator starting credentials reuse5.5 Mediumgovulncheck-vulndbopenSUSEOpenFGA Authorization Bypass5.8 Mediumgovulncheck-vulndbopenSUSEzot logs secrets5.5 Mediumgovulncheck-vulndbopenSUSEFiber panics when fiber.Ctx.BodyParser parses invalid range index7.7 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEejson2env has insufficient input sanitization6.6 Mediumgovulncheck-vulndbopenSUSEcontainerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.4.6 Medium- Show moreLoading…