govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEMinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS8.1 Highgovulncheck-vulndbopenSUSEArbitrary Mattermost Team can be joined by manipulating the OAuth state8.1 Highgovulncheck-vulndbopenSUSEApache Traffic Control: ReDoS issue in Traffic Router configuration7.5 Highgovulncheck-vulndbopenSUSESlack import bypasses email verification for team access controls5.4 Mediumgovulncheck-vulndbopenSUSEGuest user can add unauthorized team users to private channels3.1 Lowgovulncheck-vulndbopenSUSEArbitrary Mattermost Team can be joined by manipulating the SAML RelayState8.1 Highgovulncheck-vulndbopenSUSEInsecure string comparison enables timing attacks3.1 Lowgovulncheck-vulndbopenSUSEGuest user can discover active public channels4.3 Mediumgovulncheck-vulndbopenSUSEgo-witness Improper Verification of AWS EC2 Identity Documents6.9 Mediumgovulncheck-vulndbopenSUSEArgo Workflows exposes artifact repository credentials in workflow-controller logs8.5 Highgovulncheck-vulndbopenSUSEargo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite8.1 Highgovulncheck-vulndbopenSUSEOmni leaks information via the API8.6 Highgovulncheck-vulndbopenSUSEOmni is Vulnerable to DoS via Empty Create/Update Resource Requests5.3 Mediumgovulncheck-vulndbopenSUSEquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 Highgovulncheck-vulndbopenSUSEDoS via Out Of Memory Crash5.3 Mediumgovulncheck-vulndbopenSUSEAllstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret4.6 Mediumgovulncheck-vulndbopenSUSEExcessive CPU consumption in ParseAddress in net/mail7.5 Highgovulncheck-vulndbopenSUSEExcessive CPU consumption in Reader.ReadResponse in net/textproto5.3 Mediumgovulncheck-vulndbopenSUSEQuadratic complexity when parsing some invalid inputs in encoding/pem7.5 Highgovulncheck-vulndbopenSUSECasdoor is vulnerable to Improper Authorization7.2 Highgovulncheck-vulndbopenSUSEInfinite parsing loop in golang.org/x/net5.3 Mediumgovulncheck-vulndbopenSUSEALPN negotiation error contains attacker controlled information in crypto/tls5.3 Mediumgovulncheck-vulndbopenSUSEPanic when validating certificates with DSA public keys in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEQuadratic complexity when checking name constraints in crypto/x5097.5 Highgovulncheck-vulndbopenSUSELack of limit when parsing cookies can cause memory exhaustion in net/http5.3 Mediumgovulncheck-vulndbopenSUSEParsing DER payload can cause memory exhaustion in encoding/asn15.3 Mediumgovulncheck-vulndbopenSUSEUnbounded allocation when parsing GNU sparse map in archive/tar4.3 Mediumgovulncheck-vulndbopenSUSEInsufficient validation of bracketed IPv6 hostnames in net/url5.3 Mediumgovulncheck-vulndbopenSUSEQuadratic parsing complexity in golang.org/x/net/html5.3 Mediumgovulncheck-vulndbopenSUSEPath Traversal in LXD Instance Log File Retrieval7.1 Highgovulncheck-vulndbopenSUSEProject existence disclosure in LXD images API6.9 Mediumgovulncheck-vulndbopenSUSEProject Existence Disclosure via Error Handling in LXD Image Export6.9 Mediumgovulncheck-vulndbopenSUSEPrivilege Escalation via WebSocket Connection Hijacking in LXD Operations API7.4 Highgovulncheck-vulndbopenSUSESource Container Identification Vulnerability via cmdline Spoofing in devLXD Server5.1 Mediumgovulncheck-vulndbopenSUSEArbitrary File Read via Template Injection in Snapshot Patterns7.1 Highgovulncheck-vulndbopenSUSECSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI7.5 Highgovulncheck-vulndbopenSUSEMANTRA tx gas limit is not enforced in send hooks8.8 Highgovulncheck-vulndbopenSUSEArgo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook7.5 Highgovulncheck-vulndbopenSUSEargo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload7.5 Highgovulncheck-vulndbopenSUSEUnauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload7.5 Highgovulncheck-vulndbopenSUSERepository Credentials Race Condition Crashes Argo CD Server6.5 Mediumgovulncheck-vulndbopenSUSEAgentAPI exposed user chat history via a DNS rebinding attack6.5 Mediumgovulncheck-vulndbopenSUSEgo-f3 module vulnerable to integer overflow leading to panic7.5 Highgovulncheck-vulndbopenSUSEgo-f3 is Vulnerable to Cached Justification Verification Bypass5.9 Mediumgovulncheck-vulndbopenSUSEgo-mail has insufficient address encoding when passing mail addresses to the SMTP client8.2 Highgovulncheck-vulndbopenSUSEvet MCP Server SSE Transport DNS Rebinding Vulnerability2.1 Lowgovulncheck-vulndbopenSUSEgithub.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input6.9 Mediumgovulncheck-vulndbopenSUSERancher update on users can deny the service to the admin7.6 Highgovulncheck-vulndbopenSUSERancher CLI SAML authentication is vulnerable to phishing attacks8.0 Highgovulncheck-vulndbopenSUSERancher sends sensitive information to external services through the `/meta/proxy` endpoint4.7 Medium- Show moreLoading…