govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSELogrus is vulnerable to DoS when using Entry.Writer()7.5 Highgovulncheck-vulndbopenSUSEStep CA Has Authorization Bypass in ACME and SCEP Provisioners10.0 Criticalgovulncheck-vulndbopenSUSECoder logged sensitive objects unsanitized7.8 Highgovulncheck-vulndbopenSUSEImproper Authorization Check for SSH Certificate Revocation5.0 Mediumgovulncheck-vulndbopenSUSEDNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode7.3 Highgovulncheck-vulndbopenSUSEImproper application of excluded DNS name constraints when verifying wildcard names in crypto/x5096.5 Mediumgovulncheck-vulndbopenSUSEExcessive resource consumption when printing error string for host certificate validation in crypto/x5097.5 Highgovulncheck-vulndbopenSUSEApptainer ineffective application of selinux and apparmor --security options4.5 Mediumgovulncheck-vulndbopenSUSESingluarity ineffectively applies of selinux / apparmor LSM process labels4.5 Mediumgovulncheck-vulndbopenSUSEgokey allows secret recovery from a seed file without the master password7.1 Highgovulncheck-vulndbopenSUSEUnauthorized access and subscription vulnerability in Boards3.1 Lowgovulncheck-vulndbopenSUSEEclipse Paho Go MQTT may incorrectly encode strings if length exceeds 65535 bytes6.3 Mediumgovulncheck-vulndbopenSUSEGin-vue-admin has an arbitrary file deletion vulnerability8.7 Highgovulncheck-vulndbopenSUSEInsecure Direct Object Reference in Mattermost Boards Plugin Enables Unauthorised Comment Deletion4.3 Mediumgovulncheck-vulndbopenSUSECilium with misconfigured toGroups in policies can lead to unrestricted egress traffic4.0 Mediumgovulncheck-vulndbopenSUSEAccount Takeover via Code Exchange Endpoint9.9 Criticalgovulncheck-vulndbopenSUSEInformation Disclosure in Common Teams API4.3 Mediumgovulncheck-vulndbopenSUSEAccount takeover on OAuth/OpenID-enabled servers9.9 Criticalgovulncheck-vulndbopenSUSEVictoriaMetrics Snappy Decoder DoS Vulnerability is Causing OOM2.7 Lowgovulncheck-vulndbopenSUSEGrype has a credential disclosure vulnerability in Grype JSON output8.2 Highgovulncheck-vulndbopenSUSESecurity update for govulncheck-vulndbNo scoregovulncheck-vulndbopenSUSEOpenBao Privileged Operator Identity Group Root Escalation7.5 Highgovulncheck-vulndbopenSUSEQuantumNous New API Has SSRF Bypass8.5 Highgovulncheck-vulndbopenSUSENSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST7.5 Highgovulncheck-vulndbopenSUSEFree5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API6.5 Mediumgovulncheck-vulndbopenSUSEFree5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API6.5 Mediumgovulncheck-vulndbopenSUSESpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results2.9 Lowgovulncheck-vulndbopenSUSEVault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method7.4 Highgovulncheck-vulndbopenSUSEIncorrect privilege assignment10.0 Criticalgovulncheck-vulndbopenSUSEOpenFGA Improper Policy Enforcement5.8 Mediumgovulncheck-vulndbopenSUSEDenial of Service in OSV-SCALIBR1.9 Lowgovulncheck-vulndbopenSUSEUnbounded memory consumption in golang.org/x/crypto/ssh5.3 Mediumgovulncheck-vulndbopenSUSEMalformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent5.3 Mediumgovulncheck-vulndbopenSUSEesm.sh CDN service has JS Template Literal Injection in CSS-to-JavaScript6.1 Mediumgovulncheck-vulndbopenSUSEesm.sh CDN service has arbitrary file write via tarslip8.2 Highgovulncheck-vulndbopenSUSEauthentik invitation expiry is delayed by at least 5 minutes5.8 Mediumgovulncheck-vulndbopenSUSEauthentik deactivated service accounts can authenticate to OAuth4.8 Mediumgovulncheck-vulndbopenSUSEChannel member objects leak read status3.0 Lowgovulncheck-vulndbopenSUSEMemos Access Tokens Stay Valid after User Password Change7.1 Highgovulncheck-vulndbopenSUSEPassword hash and MFA secret returned in user email verification endpoint4.9 Mediumgovulncheck-vulndbopenSUSEMS Teams plugin OAuth allows editing arbitrary posts5.4 Mediumgovulncheck-vulndbopenSUSELack of MFA enforcement in WebSocket connections6.5 Mediumgovulncheck-vulndbopenSUSEUnauthorized access to archived channel content via threads interface3.1 Lowgovulncheck-vulndbopenSUSEGuest user can discover archived public channels4.3 Mediumgovulncheck-vulndbopenSUSEPotential denial of service in golang.org/x/crypto/ssh/agent7.5 Highgovulncheck-vulndbopenSUSECross-team channel membership access3.1 Lowgovulncheck-vulndbopenSUSEZITADEL vulnerable to Account Takeover with deactivated Instance IdP7.4 Highgovulncheck-vulndbopenSUSEFileBrowser has Insecure Direct Object Reference (IDOR) in Share Deletion Function7.2 Highgovulncheck-vulndbopenSUSEEvervault Go SDK: Incomplete PCR Validation in Enclave Attestation for non-Evervault hosted Enclaves8.7 Highgovulncheck-vulndbopenSUSEObservability-operator: observability operator privilege escalation8.8 High- Show moreLoading…