govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSENeuVector has an insecure password storage vulnerable to rainbow attack5.3 Mediumgovulncheck-vulndbopenSUSENodes can delete themselves by adding an OwnerReference6.7 Mediumgovulncheck-vulndbopenSUSEsimple-admin-core SQL Injection vulnerability7.0 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEInformation Disclosure in Amazon ECS Container Agent5.3 Mediumgovulncheck-vulndbopenSUSEHelm May Panic Due To Incorrect YAML Content6.5 Mediumgovulncheck-vulndbopenSUSEHelm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion6.5 Mediumgovulncheck-vulndbopenSUSEExternal Secrets Operator Missing Namespace Restriction in PushSecret and SecretStore List() Calls Allows Unauthorized Secret Access7.1 Highgovulncheck-vulndbopenSUSEOliveTin OS Command Injection vulnerability6.5 Mediumgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEUnauthorized Channel Subscription Creation in Mattermost Confluence Plugin4.0 Mediumgovulncheck-vulndbopenSUSEUnexpected input to Create Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 Highgovulncheck-vulndbopenSUSEUnauthenticated Channel Subscription Edit in Mattermost Confluence Plugin7.2 Highgovulncheck-vulndbopenSUSEUnexpected Input to Cloud Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Mediumgovulncheck-vulndbopenSUSEUnauthorized Subscription Creation to Confluence Space in Mattermost Confluence Plugin5.0 Mediumgovulncheck-vulndbopenSUSEUnauthorized Channel Subscription Edit in Mattermost Confluence Plugin4.0 Mediumgovulncheck-vulndbopenSUSELack of Authorization on Get Channel Subscriptions for Autocomplete in Mattermost Confluence Plugin3.7 Lowgovulncheck-vulndbopenSUSEUnexpected Input to Server Webhook endpoint Causes DoS in Mattermost Confluence Plugin5.9 Mediumgovulncheck-vulndbopenSUSEUnexpected input to Update Channel Subscription endpoint causes DoS in Mattermost Confluence Plugin7.5 Highgovulncheck-vulndbopenSUSEUnauthenticated Access to Channel Subscription in Mattermost Confluence Plugin3.7 Lowgovulncheck-vulndbopenSUSEUnauthorized Subscription Edit to Confluence Space in Mattermost Confluence Plugin6.4 Mediumgovulncheck-vulndbopenSUSEUnauthenticated Channel Subscription Creation in Mattermost Confluence Plugin7.2 Highgovulncheck-vulndbopenSUSEUnauthorized Channel Subscription Read in Mattermost Confluence Plugin4.0 Mediumgovulncheck-vulndbopenSUSEOpenBao LDAP MFA Enforcement Bypass When Using Username As Alias6.5 Mediumgovulncheck-vulndbopenSUSEOpenBao Login MFA Bypasses Rate Limiting and TOTP Token Reuse5.7 Mediumgovulncheck-vulndbopenSUSEOpenBao TOTP Secrets Engine Enables Code Reuse6.5 Mediumgovulncheck-vulndbopenSUSEOpenBao: Timing Side-Channel in Userpass Auth Method3.7 Lowgovulncheck-vulndbopenSUSEOpenBao Userpass and LDAP User Lockout Bypass5.3 Mediumgovulncheck-vulndbopenSUSEOpenBao: Privileged Operator May Execute Code on the Underlying Host9.1 Criticalgovulncheck-vulndbopenSUSEOpenBao Root Namespace Operator May Elevate Token Privileges7.2 Highgovulncheck-vulndbopenSUSEOperator-sdk: privilege escalation due to incorrect permissions of /etc/passwd6.4 Mediumgovulncheck-vulndbopenSUSEIncorrect results returned from Rows.Scan in database/sql7.0 Highgovulncheck-vulndbopenSUSEUnexpected paths returned from LookPath in os/exec6.5 Mediumgovulncheck-vulndbopenSUSEOllama allows deletion of arbitrary files6.6 Mediumgovulncheck-vulndbopenSUSELego does not enforce HTTPS2.3 Lowgovulncheck-vulndbopenSUSEVault LDAP MFA Enforcement Bypass When Using Username As Alias6.5 Mediumgovulncheck-vulndbopenSUSEFiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder8.7 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSERatPanel can perform remote command execution without authorization7.7 Highgovulncheck-vulndbopenSUSESSRF in Infinity Datasource Plugin5.0 Mediumgovulncheck-vulndbopenSUSE1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution8.1 Highgovulncheck-vulndbopenSUSETraefik's Client Plugin is Vulnerable to Path Traversal, Arbitrary File Overwrites and Remote Code Execution7.3 Highgovulncheck-vulndbopenSUSEVault Login MFA Bypass of Rate Limiting and TOTP Code Reuse5.7 Mediumgovulncheck-vulndbopenSUSETiming Side-Channel in Vault’s Userpass Auth Method3.7 Lowgovulncheck-vulndbopenSUSEVault Userpass and LDAP User Lockout Bypass5.3 Mediumgovulncheck-vulndbopenSUSEVault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates6.8 Mediumgovulncheck-vulndbopenSUSEVault TOTP Secrets Engine Code Reuse6.5 Mediumgovulncheck-vulndbopenSUSEArbitrary Remote Code Execution via Plugin Catalog Abuse9.1 Criticalgovulncheck-vulndbopenSUSEVault Root Namespace Operator May Elevate Token Privileges7.2 Highgovulncheck-vulndbopenSUSEOAuth2-Proxy has authentication bypass in oauth2-proxy skip_auth_routes due to Query Parameter inclusion9.1 Critical- Show moreLoading…