govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEjose2go is vulnerable to a JWT bomb attack through its decode function7.5 Highgovulncheck-vulndbopenSUSESpiceDB's WriteRelationships fails silently if payload is too big2.7 Lowgovulncheck-vulndbopenSUSEMilvus Proxy has Critical Authentication Bypass Vulnerability9.3 Criticalgovulncheck-vulndbopenSUSESoft Serve is vulnerable to SSRF through its Webhooks9.1 Criticalgovulncheck-vulndbopenSUSEOAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalation8.5 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEIncus vulnerable to local privilege escalation through custom storage volumes8.6 Highgovulncheck-vulndbopenSUSEKubeVirt Vulnerable to Arbitrary Host File Read and Write8.5 Highgovulncheck-vulndbopenSUSESoft Serve does not sanitize ANSI escape sequences in user input4.6 Mediumgovulncheck-vulndbopenSUSEKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes5.0 Mediumgovulncheck-vulndbopenSUSEKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes6.9 Mediumgovulncheck-vulndbopenSUSEKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation5.3 Mediumgovulncheck-vulndbopenSUSEKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing4.7 Mediumgovulncheck-vulndbopenSUSEKubeVirt Arbitrary Container File Read6.5 Mediumgovulncheck-vulndbopenSUSEKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer4.7 Mediumgovulncheck-vulndbopenSUSEcontainerd CRI server: Host memory exhaustion through Attach goroutine leak6.9 Mediumgovulncheck-vulndbopenSUSEcontainerd affected by a local privilege escalation via wide permissions on CRI directory7.3 Highgovulncheck-vulndbopenSUSEIDOR Vulnerabilities in ZITADEL's Organization API allows Cross-Tenant Data Tempering8.7 Highgovulncheck-vulndbopenSUSEkgateway is missing xDS authorization5.3 Mediumgovulncheck-vulndbopenSUSEMARIN3R: Cross-Namespace Vulnerability in the Operator8.7 Highgovulncheck-vulndbopenSUSErunc: LSM labels can be bypassed with malicious config using dummy procfs files7.3 Highgovulncheck-vulndbopenSUSEcontainer escape due to /dev/console mount and related races8.4 Highgovulncheck-vulndbopenSUSErunc container escape via "masked path" abuse due to mount race conditions7.3 Highgovulncheck-vulndbopenSUSEJellysweep uses uncontrolled data in image cache API endpoint8.9 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSElakeFS: Unauthenticated access to API usage metrics5.3 Mediumgovulncheck-vulndbopenSUSEsqls-server/sqls is vulnerable to command injection in the config command7.5 Highgovulncheck-vulndbopenSUSEZitadel Bypass Second Authentication Factor8.7 Highgovulncheck-vulndbopenSUSEZitadel allows brute-forcing authentication factors7.7 Highgovulncheck-vulndbopenSUSEZITADEL Vulnerable to Account Takeover via Malicious Forwarded Header Injection8.1 Highgovulncheck-vulndbopenSUSEConsul's KV endpoint is vulnerable to denial of service6.5 Mediumgovulncheck-vulndbopenSUSEConsul's event endpoint is vulnerable to denial of service6.5 Mediumgovulncheck-vulndbopenSUSESliver does not restricted traffic between Wireguard clients.6.3 Mediumgovulncheck-vulndbopenSUSEDocker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations8.9 Highgovulncheck-vulndbopenSUSEConstellation allows insecure use of LUKS2 persistent storage partitions8.3 Highgovulncheck-vulndbopenSUSERancher exposes sensitive information through audit logs4.3 Mediumgovulncheck-vulndbopenSUSEKarmada Dashboard API Unauthorized Access Vulnerability8.7 Highgovulncheck-vulndbopenSUSERancher user retains access to clusters despite Global Role removal4.3 Mediumgovulncheck-vulndbopenSUSEVault Vulnerable to Denial of Service Due to Rate Limit Regression7.5 Highgovulncheck-vulndbopenSUSEVault AWS auth method bypass due to AWS client cache8.1 Highgovulncheck-vulndbopenSUSEOpenBao AWS Plugin Vulnerable to Cross-Account IAM Role Impersonation in AWS Auth Method8.1 Highgovulncheck-vulndbopenSUSESlack Nebula may accept arbitrary source IP addresses4.9 Mediumgovulncheck-vulndbopenSUSEOpenBao and Vault Leak []byte Fields in Audit Logs5.7 Mediumgovulncheck-vulndbopenSUSEOpenBao leaks HTTPRawBody in Audit Logs5.7 Mediumgovulncheck-vulndbopenSUSENeuVector is shipping cryptographic material into its binary6.5 Mediumgovulncheck-vulndbopenSUSENeuVector telemetry sender is vulnerable to MITM and DoS8.6 Highgovulncheck-vulndbopenSUSENeuVector Enforcer is vulnerable to Command Injection and Buffer overflow9.9 Criticalgovulncheck-vulndbopenSUSEAdmin with default credentials in NetBird VPN9.3 Criticalgovulncheck-vulndbopenSUSEOpenBao vulnerable to denial of service via malicious JSON request processing7.5 Highgovulncheck-vulndbopenSUSEGit LFS may write to arbitrary files via crafted symlinks8.6 High- Show moreLoading…