govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEPodinfo affected by Arbitrary File Upload that leads to Stored Cross-Site Scripting (XSS)6.1 Mediumgovulncheck-vulndbopenSUSEcert-manager-controller DoS via Specially Crafted DNS Response5.9 Mediumgovulncheck-vulndbopenSUSEterraform-provider-proxmox has insecure sudo recommendation in the documentation8.7 Highgovulncheck-vulndbopenSUSEOpenList Insecure TLS Default Configuration8.1 Highgovulncheck-vulndbopenSUSEOpenList affected by Path Traversal in file copy and remove handlers8.8 Highgovulncheck-vulndbopenSUSEOpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking7.0 Highgovulncheck-vulndbopenSUSERancher CLI skips TLS verification on Rancher CLI login command8.3 Highgovulncheck-vulndbopenSUSEInspektor Gadget has a Command Injection vulnerability in Makefile.build6.6 Mediumgovulncheck-vulndbopenSUSEmalcontent's archive extraction could write outside extraction directory5.5 Mediumgovulncheck-vulndbopenSUSEmalcontent's OCI image scanning could expose registry credentials6.5 Mediumgovulncheck-vulndbopenSUSEJuju has broken CMR authorization2.1 Lowgovulncheck-vulndbopenSUSEKargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access6.9 Mediumgovulncheck-vulndbopenSUSEKyverno Denial of Service via Context Variable Amplification in Policy Engine7.7 Highgovulncheck-vulndbopenSUSEKyverno Cross-Namespace Privilege Escalation via Policy apiCall10.0 Criticalgovulncheck-vulndbopenSUSEgmrtd ReadFile Vulnerable to Denial of Service via Excessive TLV Length Values5.9 Mediumgovulncheck-vulndbopenSUSEDozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access8.7 Highgovulncheck-vulndbopenSUSEgo-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names4.7 Mediumgovulncheck-vulndbopenSUSESkipper Ingress Controller Allows Unauthorized Access to Internal Services via ExternalName8.1 Highgovulncheck-vulndbopenSUSEKubevirt: kubevirt: vm administration denial of service via guest agent6.4 Mediumgovulncheck-vulndbopenSUSEFree5gc NRF is vulnerable to scope validation bypass via maliciously crafted targetNF value9.1 Criticalgovulncheck-vulndbopenSUSEGitea: Cross-Repository Authorization Bypass via Release Attachment Linking Leads to Private Attachment Disclosure9.1 Criticalgovulncheck-vulndbopenSUSEGitea: Broken access control in OpenID visibility toggle enables cross-user visibility changes6.5 Mediumgovulncheck-vulndbopenSUSEGitea Git LFS Lock Deletion Broken Access Control (Cross-Repo IDOR)9.1 Criticalgovulncheck-vulndbopenSUSEGitea Pull Requests Auto-Merge: Read-Only Users Can Cancel Scheduled Auto-Merge via Web Endpoint (Authorization Bypass)4.3 Mediumgovulncheck-vulndbopenSUSEGitea Stopwatch API Missing Authorization Check Leads to Post-Revocation Information Disclosure6.5 Mediumgovulncheck-vulndbopenSUSENotification API Leaks Private Repository Issue Titles After Collaborator Permission Revocation6.5 Mediumgovulncheck-vulndbopenSUSEGitea Organization Projects Cross-Organization Authorization Bypass via Project ID (IDOR)9.1 Criticalgovulncheck-vulndbopenSUSEGitea Web Attachment Deletion: Cross-Repository Unauthorized Deletion via Missing Repo Ownership Check7.5 Highgovulncheck-vulndbopenSUSEGitea Release Email Notifications Leak Private Repository Release Details After Access Revocation3.5 Lowgovulncheck-vulndbopenSUSEsigstore legacy TUF client allows for arbitrary file writes with target cache path traversal5.8 Mediumgovulncheck-vulndbopenSUSEIncus container image templating arbitrary host file read and write8.7 Highgovulncheck-vulndbopenSUSEIncus container environment configuration newline injection8.7 Highgovulncheck-vulndbopenSUSERekor affected by Server-Side Request Forgery (SSRF) via provided public key URL5.3 Mediumgovulncheck-vulndbopenSUSERekor COSE v0.0.1 Canonicalize crashes when passed empty Message5.3 Mediumgovulncheck-vulndbopenSUSEDragonfly Manager Job API Allows Unauthenticated Access8.9 Highgovulncheck-vulndbopenSUSESoft Serve has Critical Authentication Bypass8.1 Highgovulncheck-vulndbopenSUSEFlux Operator Web UI Impersonation Bypass via Empty OIDC Claims5.3 Mediumgovulncheck-vulndbopenSUSEArgo Workflows affected by stored XSS in the artifact directory listing7.3 Highgovulncheck-vulndbopenSUSEgo-tuf improperly validates the configured threshold for delegations5.9 Mediumgovulncheck-vulndbopenSUSEgo-tuf affected by client DoS via malformed server response5.9 Mediumgovulncheck-vulndbopenSUSEFleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment9.3 Criticalgovulncheck-vulndbopenSUSEFleet has an Access Control vulnerability in debug/pprof endpoints6.3 Mediumgovulncheck-vulndbopenSUSEFleet Windows MDM endpoint has a Cross-site Scripting vulnerability5.5 Mediumgovulncheck-vulndbopenSUSEExternal Secrets Operator insecurely retrieves secrets through the getSecretKey templating function9.3 Criticalgovulncheck-vulndbopenSUSEFile Browser vulnerable to Username Enumeration via Timing Attack in /api/login5.3 Mediumgovulncheck-vulndbopenSUSESiYuan Vulnerable to Arbitrary File Read via File Copy Functionality8.3 Highgovulncheck-vulndbopenSUSESiYuan vulnerable to arbitrary file read7.8 Highgovulncheck-vulndbopenSUSESiYuan Vulnerable to Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon2.1 Lowgovulncheck-vulndbopenSUSEEndless reprocessing/reupload of activity log data due to SQLite max parameters limit not being considered8.3 Highgovulncheck-vulndbopenSUSEPterodactyl Wings's websocket endpoints have no visible rate limits or monitoring, allowing for DOS attacks under certain circumstances8.3 High- Show moreLoading…