govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEMoby's Firewalld reload removes bridge network isolation3.3 Lowgovulncheck-vulndbopenSUSEMoby's Firewalld reload makes published container ports accessible from remote hosts5.1 Mediumgovulncheck-vulndbopenSUSECouchbase Sync Gateway shows cleartext passwords in redacted and unredacted output7.3 Highgovulncheck-vulndbopenSUSEMemos has Cross-Site Scripting (XSS) Vulnerability in Image URLs9.8 Criticalgovulncheck-vulndbopenSUSEeKuiper API endpoints handling SQL queries with user-controlled table names.8.9 Highgovulncheck-vulndbopenSUSEPossible ORM Leak Vulnerability in the Harbor4.9 Mediumgovulncheck-vulndbopenSUSEHarbor's repository description page allows for XSS4.1 Mediumgovulncheck-vulndbopenSUSEauthentik has an insufficient check for account active status during OAuth/SAML authentication7.1 Highgovulncheck-vulndbopenSUSEKyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service7.7 Highgovulncheck-vulndbopenSUSEOllama vulnerable to Cross-Domain Token Exposure6.9 Mediumgovulncheck-vulndbopenSUSEmelange creates SBOM files in APKs with world-writable permissions4.4 Mediumgovulncheck-vulndbopenSUSEapko has incorrect permission (0666) in /etc/ld.so.cache and other files7.0 Highgovulncheck-vulndbopenSUSEInvite token is used as part of the secure communication2.2 Lowgovulncheck-vulndbopenSUSEArbitrary file read by system admin via path traversal6.8 Mediumgovulncheck-vulndbopenSUSEIDOR in CreatePost API allows for timeboxed message disclosure6.5 Mediumgovulncheck-vulndbopenSUSEGrafana is vulnerable to XSS attacks through open redirects and path traversal7.6 Highgovulncheck-vulndbopenSUSENVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook8.5 Highgovulncheck-vulndbopenSUSENVIDIA Container Toolkit for all platforms contains an Untrusted Search Path9.0 Criticalgovulncheck-vulndbopenSUSEFileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout7.7 Highgovulncheck-vulndbopenSUSEFile Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing7.7 Highgovulncheck-vulndbopenSUSEsaltbo zpan JSON Web Token token.go NewToken hard-coded password6.3 Mediumgovulncheck-vulndbopenSUSEChall-Manager's HTTP Gateway have no header check timeout leading to potential slow loris attacks8.7 Highgovulncheck-vulndbopenSUSEChall-Manager's scenario decoding process does not check for zip bombs8.7 Highgovulncheck-vulndbopenSUSEChall-Manager's scenario decoding process does not check for zip slips8.8 Highgovulncheck-vulndbopenSUSEUnexpected command execution in untrusted VCS repositories in cmd/go8.6 Highgovulncheck-vulndbopenSUSEHelm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution8.5 Highgovulncheck-vulndbopenSUSEArbitrary executable upload via authenticated endpoint8.8 Highgovulncheck-vulndbopenSUSEZip slip vulnerability in Juju8.8 Highgovulncheck-vulndbopenSUSESensitive log retrieval in Juju6.5 Mediumgovulncheck-vulndbopenSUSEGrafana's insecure DingDing Alert integration exposes sensitive information4.3 Mediumgovulncheck-vulndbopenSUSEKey leakage in juju/utils certificates6.5 Mediumgovulncheck-vulndbopenSUSEFile Browser Insecurely Handles Passwords5.9 Mediumgovulncheck-vulndbopenSUSEFile Browser's Password Protection of Links Vulnerable to Bypass3.1 Lowgovulncheck-vulndbopenSUSEFile Browser vulnerable to command execution allowlist bypass8.1 Highgovulncheck-vulndbopenSUSEFile Browser allows sensitive data to be transferred in URL4.5 Mediumgovulncheck-vulndbopenSUSEMattermost Playbooks exposes private channel metadata to unauthorized users via run metadata API4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Playbooks allows privilege escalation through improper access control in playbook run participant management5.4 Mediumgovulncheck-vulndbopenSUSEFile Browser: Command Execution not Limited to Scope8.0 Highgovulncheck-vulndbopenSUSEFile Browser Allows Execution of Shell Commands That Can Spawn Other Commands8.0 Highgovulncheck-vulndbopenSUSEOcto-STS Vulnerable to Unauthenticated SSRF with HTTP Response Reflection in OIDC Flow8.6 Highgovulncheck-vulndbopenSUSEFile Browser has Stored Cross-Site Scripting vulnerability7.6 Highgovulncheck-vulndbopenSUSEFile Browser has Insecure File Permissions5.5 Mediumgovulncheck-vulndbopenSUSESnyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode2.4 Lowgovulncheck-vulndbopenSUSEOpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation6.9 Mediumgovulncheck-vulndbopenSUSEOpenBao May Leak Sensitive Information in Logs When Processing Malformed Data4.5 Mediumgovulncheck-vulndbopenSUSEIncus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs8.1 Highgovulncheck-vulndbopenSUSEIncus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs3.4 Lowgovulncheck-vulndbopenSUSEVault Vulnerable to Recovery Key Cancellation Denial of Service3.1 Lowgovulncheck-vulndbopenSUSEPodman: podman missing tls verification8.3 Highgovulncheck-vulndbopenSUSEGogs stored XSS in PDF renderer6.3 Medium- Show moreLoading…