govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEInspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode6.9 Mediumgovulncheck-vulndbopenSUSETraefik: TCP readTimeout bypass via STARTTLS on Postgres7.5 Highgovulncheck-vulndbopenSUSEFrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files8.9 Highgovulncheck-vulndbopenSUSEFrankenPHP leaks session data between requests in worker mode8.7 Highgovulncheck-vulndbopenSUSEwebtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map5.3 Mediumgovulncheck-vulndbopenSUSEwebtransport-go CloseWithError can block indefinitely5.3 Mediumgovulncheck-vulndbopenSUSEwebtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule5.3 Mediumgovulncheck-vulndbopenSUSEXSS in Grafana Explore stack trace6.8 Mediumgovulncheck-vulndbopenSUSEMilvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise9.8 Criticalgovulncheck-vulndbopenSUSEVikunja Affected by XSS Via Task Preview8.6 Highgovulncheck-vulndbopenSUSEPion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key5.9 Mediumgovulncheck-vulndbopenSUSEHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 Mediumgovulncheck-vulndbopenSUSEgo-git improperly verifies data integrity values for .idx and .pack files4.3 Mediumgovulncheck-vulndbopenSUSEFile Browser has a Path-Based Access Control Bypass via Multiple Leading Slashes in URL8.1 Highgovulncheck-vulndbopenSUSEFile Browser has an Authentication Bypass in User Password Update5.4 Mediumgovulncheck-vulndbopenSUSEFiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure9.2 Criticalgovulncheck-vulndbopenSUSESliver has a DNS C2 OTP Bypass Allows Unauthenticated Session Flooding and Denial of Service7.5 Highgovulncheck-vulndbopenSUSEAntrea has invalid enforcement order for network policy rules caused by integer overflow8.0 Highgovulncheck-vulndbopenSUSENebula Has Possible Blocklist Bypass via ECDSA Signature Malleability7.6 Highgovulncheck-vulndbopenSUSEGogs has authorization bypass in repository deletion API5.7 Mediumgovulncheck-vulndbopenSUSEGogs vulnerable to arbitrary file deletion via path traversal in wiki page update7.2 Highgovulncheck-vulndbopenSUSEGogs has arbitrary file read/write via path traversal in Git hook editing6.5 Mediumgovulncheck-vulndbopenSUSEGogs user can update repository content with read-only permission6.5 Mediumgovulncheck-vulndbopenSUSEGogs is Vulnerable to Denial of Service6.5 Mediumgovulncheck-vulndbopenSUSEGogs Vulnerable to 2FA Bypass via Recovery Code7.7 Highgovulncheck-vulndbopenSUSEGogs's update .git/config file allows remote command execution9.3 Criticalgovulncheck-vulndbopenSUSECross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow7.7 Highgovulncheck-vulndbopenSUSEGophish is vulnerable to Incorrect Access Control7.6 Highgovulncheck-vulndbopenSUSEWebsite Path Traversal / Arbitrary File Read (Authenticated) in Sliver6.5 Mediumgovulncheck-vulndbopenSUSEOpenFGA Improper Policy Enforcement5.8 Mediumgovulncheck-vulndbopenSUSEREVA Public Link Exploit8.2 Highgovulncheck-vulndbopenSUSEPotential code smuggling via doc comments in cmd/cgo8.6 Highgovulncheck-vulndbopenSUSELocal Path Provisioner vulnerable to Path Traversal via parameters.pathPattern9.9 Criticalgovulncheck-vulndbopenSUSEDevtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage8.7 Highgovulncheck-vulndbopenSUSEAlist vulnerable to Path Traversal in multiple file operation handlers8.8 Highgovulncheck-vulndbopenSUSEAlist has Insecure TLS Config9.1 Criticalgovulncheck-vulndbopenSUSEApache Answer: Revision API Improper Access Control leads to Information Disclosure7.5 Highgovulncheck-vulndbopenSUSENavidrome affected by Denial of Service and disk exhaustion via oversized `size` parameter in `/rest/getCoverArt` and `/share/img/<token>` endpoints9.2 Criticalgovulncheck-vulndbopenSUSENavidrome is vulnerable to XSS via comment from song metadata6.1 Mediumgovulncheck-vulndbopenSUSEmelange has a path traversal in license-path which allows reading files outside workspace5.5 Mediumgovulncheck-vulndbopenSUSEmelange affected by potential host command execution via license-check YAML mode patch pipeline7.8 Highgovulncheck-vulndbopenSUSEapko affected by potential unbounded resource consumption in expandapk.ExpandApk on attacker-controlled .apk streams7.5 Highgovulncheck-vulndbopenSUSEapko is vulnerable to unbounded resource consumption in expandapk.Split on attacker-controlled .apk streams5.5 Mediumgovulncheck-vulndbopenSUSEapko is vulnerable to path traversal in apko dirFS which allows filesystem writes outside base7.5 Highgovulncheck-vulndbopenSUSEmelange pipeline working-directory could allow command injection7.8 Highgovulncheck-vulndbopenSUSEmelange QEMU runner could write files outside workspace directory8.2 Highgovulncheck-vulndbopenSUSEingress-nginx Admission Controller denial of service6.5 Mediumgovulncheck-vulndbopenSUSEingress-nginx auth-url protection bypass3.1 Lowgovulncheck-vulndbopenSUSEingress-nginx auth-method nginx configuration injection8.8 Highgovulncheck-vulndbopenSUSEingress-nginx auth-method nginx configuration injection8.8 High- Show moreLoading…