govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEGitea mishandles authorization for deletion of releases4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Jira plugin crafted action leaks Jira issue details4.1 Mediumgovulncheck-vulndbopenSUSEUnauthorized Read Access to Private Channel Posts via Mattermost Jira Plugin4.3 Mediumgovulncheck-vulndbopenSUSEKEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential8.2 Highgovulncheck-vulndbopenSUSEMattermost Jira plugin user spoofing enables Jira request forgery.7.2 Highgovulncheck-vulndbopenSUSEFilebeat Improper Validation of Specified Index, Position, or Offset in Input6.5 Mediumgovulncheck-vulndbopenSUSEElasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 Fragments5.3 Mediumgovulncheck-vulndbopenSUSEOllama Platform has missing authentication enabling attackers to perform model management operations9.8 Criticalgovulncheck-vulndbopenSUSEAmazon S3 Encryption Client has a Key Commitment Issue6.0 Mediumgovulncheck-vulndbopenSUSELack of Invalidation of Legacy Remote Cluster Invite Tokens After Confirmation3.7 Lowgovulncheck-vulndbopenSUSEDoS in Calls plugin via malformed UTF-8 in WebSocket request6.5 Mediumgovulncheck-vulndbopenSUSEOpen redirect in error page when link opened in new tab3.1 Lowgovulncheck-vulndbopenSUSEMattermost GitHub Plugin allows unauthorized GitHub reactions via reaction forwarding hijacking3.0 Lowgovulncheck-vulndbopenSUSECSRF Allows Call Initiation and Message Delivery4.3 Mediumgovulncheck-vulndbopenSUSESIPGO library has response DoS vulnerability via nil pointer dereference8.7 Highgovulncheck-vulndbopenSUSEExpr has Denial of Service via Unbounded Recursion in Builtin Functions7.5 Highgovulncheck-vulndbopenSUSEOse-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanism6.4 Mediumgovulncheck-vulndbopenSUSEALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay6.5 Mediumgovulncheck-vulndbopenSUSEInsights-runtimes-tech-preview/runtimes-inventory-rhel8-operator: improper proxy configuration allows unauthorized administrative commands8.7 Highgovulncheck-vulndbopenSUSEOpenshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobs9.1 Criticalgovulncheck-vulndbopenSUSENeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)8.8 Highgovulncheck-vulndbopenSUSEPortworx Half-Blind SSRF in kube-controller-manager5.8 Mediumgovulncheck-vulndbopenSUSEWeaviate OSS has path traversal vulnerability via the Shard Movement API4.9 Mediumgovulncheck-vulndbopenSUSEWeaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip7.2 Highgovulncheck-vulndbopenSUSEgardenctl is vulnerable to Command Injection when used with non‑POSIX shells8.0 Highgovulncheck-vulndbopenSUSEquic-go HTTP/3 QPACK Header Expansion DoS5.3 Mediumgovulncheck-vulndbopenSUSE1Panel CSRF Web Port Configuration Change7.0 Highgovulncheck-vulndbopenSUSE1Panel CSRF Panel Name Modification5.1 Mediumgovulncheck-vulndbopenSUSEZitadel Discloses the Total Number of Instance Users5.3 Mediumgovulncheck-vulndbopenSUSEMiniflux 2 has an Open Redirect via protocol-relative `redirect_url`5.3 Mediumgovulncheck-vulndbopenSUSE1Panel CSRF in Change Username Functionality Allows Account Lockout7.0 Highgovulncheck-vulndbopenSUSEFile overwrite in file update API in Gogs8.7 Highgovulncheck-vulndbopenSUSEAlgernon Cross-Site Scripting vulnerability6.1 Mediumgovulncheck-vulndbopenSUSECNI Plugins Portmap nftables backend intercepts non-local traffic6.6 Mediumgovulncheck-vulndbopenSUSESiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE7.8 Highgovulncheck-vulndbopenSUSEargoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links8.1 Highgovulncheck-vulndbopenSUSEZITADEL Vulnerable to Account Takeover via DOM-Based XSS in Zitadel V2 Login8.0 Highgovulncheck-vulndbopenSUSEZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login9.3 Criticalgovulncheck-vulndbopenSUSEFiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values9.3 Criticalgovulncheck-vulndbopenSUSE1Panel IP Access Control Bypass via Untrusted X-Forwarded-For Headers6.5 Mediumgovulncheck-vulndbopenSUSE1Panel – CAPTCHA Bypass via Client-Controlled Flag7.5 Highgovulncheck-vulndbopenSUSETraefik has Inverted TLS Verification Logic in its ingress-nginx Provider5.9 Mediumgovulncheck-vulndbopenSUSETraefik doesn't Prevent Path Normalization Bypass in Router + Middleware Rules6.9 Mediumgovulncheck-vulndbopenSUSEmemos lacks file name validation or verification4.3 Mediumgovulncheck-vulndbopenSUSEmemos vulnerability allows arbitrarily modification or deletion of attachments5.4 Mediumgovulncheck-vulndbopenSUSEmemos vulnerability allows arbitrarily modification or deletion registered identity providers6.5 Mediumgovulncheck-vulndbopenSUSEmemos vulnerability allows arbitrarily reactions deletion4.3 Mediumgovulncheck-vulndbopenSUSEmemos vulnerability allows the creation of arbitrary accounts7.5 Highgovulncheck-vulndbopenSUSESigstore Timestamp Authority allocates excessive memory during request parsing7.5 Highgovulncheck-vulndbopenSUSEFulcio allocates excessive memory during token parsing7.5 High- Show moreLoading…