govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEGardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning9.9 Criticalgovulncheck-vulndbopenSUSEOmni Wireguard SideroLink potential escape0.5 Lowgovulncheck-vulndbopenSUSEIDOR in board file download allows any user to download any file by UUID3.1 Lowgovulncheck-vulndbopenSUSEAdmin RCE via prepackaged plugins by way of misconfigured imports directory8.0 Highgovulncheck-vulndbopenSUSERegex DoS in Grafana Zabbix Plugin4.3 Mediumgovulncheck-vulndbopenSUSEDragonfly tiny file download uses hard coded HTTP protocol5.5 Mediumgovulncheck-vulndbopenSUSEDragonfly has weak integrity checks for downloaded files5.5 Mediumgovulncheck-vulndbopenSUSEManager generates mTLS certificates for arbitrary IP addresses7.7 Highgovulncheck-vulndbopenSUSEDragonfly allows arbitrary file read and write on a peer machine6.9 Mediumgovulncheck-vulndbopenSUSEDragonfly possibly panics due to nil pointer dereference when using variables created alongside an error2.7 Lowgovulncheck-vulndbopenSUSETiming attacks against Proxy’s basic authentication are possible2.7 Lowgovulncheck-vulndbopenSUSEDirectories created via os.MkdirAll are not checked for permissions2.0 Lowgovulncheck-vulndbopenSUSEDragonfly incorrectly handles a task structure’s usedTraffic field5.5 Mediumgovulncheck-vulndbopenSUSEDragonfly Manager makes requests to external endpoints with disabled TLS authentication2.7 Lowgovulncheck-vulndbopenSUSEDragonfly server-side request forgery vulnerability5.5 Mediumgovulncheck-vulndbopenSUSEDragonfly did not enable authentication for some Manager’s endpoints7.7 Highgovulncheck-vulndbopenSUSEesm.sh writes arbitrary files via path traversal in `X-Zone-Id` header5.5 Mediumgovulncheck-vulndbopenSUSELocal File Inclusion in esm.sh7.7 Highgovulncheck-vulndbopenSUSETemporal OSS Server Vulnerable to Allocation of Resources Without Limits or Throttling6.9 Mediumgovulncheck-vulndbopenSUSEOS command injection in Chaos Mesh via the cleanIptables mutation9.8 Criticalgovulncheck-vulndbopenSUSEOS command injection in Chaos Mesh via the killProcesses mutation9.8 Criticalgovulncheck-vulndbopenSUSEOS command injection in Chaos Mesh via the cleanTcs mutation9.8 Criticalgovulncheck-vulndbopenSUSEDenial of Service via Unauthorized Access to Chaos Mesh debugging server7.5 Highgovulncheck-vulndbopenSUSEOne-Click Mattermost Account Takeover via Poisoned RelayState SAML Parameter7.6 Highgovulncheck-vulndbopenSUSEOpen redirect in OAuth login3.1 Lowgovulncheck-vulndbopenSUSEWeak cache keys lead to post IDOR and link preview poisoning4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Server exposes sensitive user credentials during shared channel membership synchronization6.5 Mediumgovulncheck-vulndbopenSUSEHoverfly's WebSocket endpoint `/api/v2/ws/logs` reachable without authentication even when --auth is enabled.7.8 Highgovulncheck-vulndbopenSUSEHoverfly vulnerable to remote code execution at `/api/v2/hoverfly/middleware` endpoint due to insecure middleware implementation9.8 Criticalgovulncheck-vulndbopenSUSElistmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover8.6 Highgovulncheck-vulndbopenSUSECoreDNS: DNS Cache Pinning via etcd Lease ID Confusion7.1 Highgovulncheck-vulndbopenSUSEpREST has Systemic SQL Injection Vulnerability9.3 Criticalgovulncheck-vulndbopenSUSEAtlantis Exposes Service Version Publicly on /status API Endpoint6.9 Mediumgovulncheck-vulndbopenSUSECoder's privilege escalation vulnerability could lead to a cross workspace compromise8.1 Highgovulncheck-vulndbopenSUSEKubernetes secrets-store-sync-controller discloses service account tokens in logs6.5 Mediumgovulncheck-vulndbopenSUSECrossOriginProtection insecure bypass patterns not limited to exact matches in net/http5.4 Mediumgovulncheck-vulndbopenSUSEPodman: podman kube play command may overwrite host files8.1 Highgovulncheck-vulndbopenSUSEArgo CD: Project API Token Exposes Repository Credentials10.0 Criticalgovulncheck-vulndbopenSUSEMemos Vulnerable to Stored Cross-Site Scripting5.4 Mediumgovulncheck-vulndbopenSUSEMemos Vulnerable to Path Traversal via the CreateResource Endpoint4.3 Mediumgovulncheck-vulndbopenSUSESoft Serve is vulnerable to arbitrary file writing through its SSH API7.7 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSERancher Fleet Helm Values are stored inside BundleDeployment in plain text7.7 Highgovulncheck-vulndbopenSUSEgnark affected by denial of service when computing scalar multiplication using fake-GLV algorithm7.5 Highgovulncheck-vulndbopenSUSEHarness Affected by Arbitrary File Write in Gitness LFS server8.8 Highgovulncheck-vulndbopenSUSERancher affected by unauthenticated Denial of Service8.2 Highgovulncheck-vulndbopenSUSEgithub.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives5.3 Mediumgovulncheck-vulndbopenSUSEVault unauthenticated denial of service through complex json payload7.5 Highgovulncheck-vulndbopenSUSENeuVector admin account has insecure default password9.8 Criticalgovulncheck-vulndbopenSUSENeuVector process with sensitive arguments lead to leakage5.3 Medium- Show moreLoading…