govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEOpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field0.0 Nonegovulncheck-vulndbopenSUSEesm.sh has SSRF localhost/private-network bypass in `/http(s)` module route8.6 Highgovulncheck-vulndbopenSUSEesm.sh is vulnerable to full-response SSRF8.7 Highgovulncheck-vulndbopenSUSEOliveTin vulnerable to OS Command Injection via `password` argument type and webhook JSON extraction bypasses shell safety checks10.0 Criticalgovulncheck-vulndbopenSUSEFileBrowser Quantum: Password Protection Not Enforced on Shared File Links7.1 Highgovulncheck-vulndbopenSUSEDagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory7.1 Highgovulncheck-vulndbopenSUSEFiber has a Denial of Service Vulnerability via Route Parameter Overflow5.5 Mediumgovulncheck-vulndbopenSUSEFiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation7.5 Highgovulncheck-vulndbopenSUSEFiber has an Arbitrary File Read in Static Middleware on Windows7.7 Highgovulncheck-vulndbopenSUSECaddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport8.9 Highgovulncheck-vulndbopenSUSECaddy vulnerable to cross-origin config application via local admin API /load (caddy)6.9 Mediumgovulncheck-vulndbopenSUSECaddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass7.7 Highgovulncheck-vulndbopenSUSECaddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass7.7 Highgovulncheck-vulndbopenSUSECaddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed8.8 Highgovulncheck-vulndbopenSUSECaddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections6.9 Mediumgovulncheck-vulndbopenSUSEnats-server websockets are vulnerable to pre-auth memory DoS5.9 Mediumgovulncheck-vulndbopenSUSEIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 Lowgovulncheck-vulndbopenSUSENew API has Potential XSS in its MarkdownRenderer component7.6 Highgovulncheck-vulndbopenSUSENew API has an SQL LIKE Wildcard Injection DoS via Token Search7.1 Highgovulncheck-vulndbopenSUSECosign Certificate Chain Expiry Validation Issue Allows Issuing Certificate Expiry to Be Overlooked3.7 Lowgovulncheck-vulndbopenSUSECilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled6.1 Mediumgovulncheck-vulndbopenSUSEKata Container to Guest micro VM privilege escalation9.4 Criticalgovulncheck-vulndbopenSUSEKargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints9.4 Criticalgovulncheck-vulndbopenSUSEKargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints5.3 Mediumgovulncheck-vulndbopenSUSEGo Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake6.9 Mediumgovulncheck-vulndbopenSUSEGo Ethereum affected by DoS via malicious p2p message8.7 Highgovulncheck-vulndbopenSUSEGo Ethereum affected by DoS via malicious p2p message6.9 Mediumgovulncheck-vulndbopenSUSEuTLS has a fingerprint vulnerability from missing padding extension for Chrome 1202.3 Lowgovulncheck-vulndbopenSUSEuTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch2.3 Lowgovulncheck-vulndbopenSUSEopa-envoy-plugin has an Authorization Bypass via Double-Slash Path Misinterpretation in `input.parsed_path`7.1 Highgovulncheck-vulndbopenSUSEWithdrawn Advisory: Libredesk has a SSRF Vulnerability in Webhooks6.9 Mediumgovulncheck-vulndbopenSUSEfilippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 Lowgovulncheck-vulndbopenSUSEemp3r0r Affected by Concurrent Map Access DoS (panic/crash)7.0 Highgovulncheck-vulndbopenSUSEEcho has a Windows path traversal via backslash in middleware.Static default filesystem5.3 Mediumgovulncheck-vulndbopenSUSEGogs allows unauthenticated file uploads6.9 Mediumgovulncheck-vulndbopenSUSEGogs has a Protected Branch Deletion Bypass in Web Interface7.1 Highgovulncheck-vulndbopenSUSEGogs Authorization Bypass Allows Cross-Repository Label Modification5.3 Mediumgovulncheck-vulndbopenSUSEGogs Allows Cross-Repository Comment Deletion via DeleteComment5.1 Mediumgovulncheck-vulndbopenSUSETeam Admin Bypass of Invite Permissions via allow_open_invite Field3.8 Lowgovulncheck-vulndbopenSUSEInformation disclosure via channel mentions in posts4.3 Mediumgovulncheck-vulndbopenSUSEUser profile update exposes password hash and MFA secrets5.7 Mediumgovulncheck-vulndbopenSUSEMattermost Zoom Plugin channel preference API lacks authorization checks4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls4.3 Mediumgovulncheck-vulndbopenSUSEAuthentication bypass via userID login when email and username login are disabled5.4 Mediumgovulncheck-vulndbopenSUSElakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access8.1 Highgovulncheck-vulndbopenSUSETime-of-check time-of-use vulnerability in common teams API3.1 Lowgovulncheck-vulndbopenSUSEInsufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments4.3 Mediumgovulncheck-vulndbopenSUSENeuVector scanner insecurely handles passwords as command arguments3.8 Lowgovulncheck-vulndbopenSUSEArbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC8.8 Highgovulncheck-vulndbopenSUSEUnauthenticated Admission Webhook Endpoints in Yoke ATC7.5 High- Show moreLoading…