govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEFile Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely5.3 Mediumgovulncheck-vulndbopenSUSEDenial of service in github.com/shamaton/msgpack7.5 Highgovulncheck-vulndbopenSUSEDenial of service in github.com/buger/jsonparser7.5 Highgovulncheck-vulndbopenSUSEDenial of service in github.com/jackc/pgproto3/v27.5 Highgovulncheck-vulndbopenSUSEPermission Bypass in Playbook Run Creation4.3 Mediumgovulncheck-vulndbopenSUSESiYuan Vulnerable to Remote Code Execution via Stored XSS in Notebook Name - Mobile Interface5.1 Mediumgovulncheck-vulndbopenSUSESiYuan importStdMd: unvalidated localPath imports arbitrary host directories as persistent notes6.8 Mediumgovulncheck-vulndbopenSUSESiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file write7.6 Highgovulncheck-vulndbopenSUSESiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure5.3 Mediumgovulncheck-vulndbopenSUSESiYuan: Incomplete sensitive path blocklist in globalCopyFiles allows reading /proc and Docker secrets6.8 Mediumgovulncheck-vulndbopenSUSEIncusOS has a LUKS encryption bypass due to insufficient TPM policy7.7 Highgovulncheck-vulndbopenSUSEGuest users can bypass read permissions via search API4.3 Mediumgovulncheck-vulndbopenSUSEPassword Change Bypass via Auth Switch Endpoint3.1 Lowgovulncheck-vulndbopenSUSESSRF bypass via IPv4-mapped IPv6 literals4.3 Mediumgovulncheck-vulndbopenSUSEPrivate channel enumeration via /mute slash command4.3 Mediumgovulncheck-vulndbopenSUSEMemory Exhaustion via Malformed DOC File Upload4.3 Mediumgovulncheck-vulndbopenSUSEGuest user can upload files without permission across teams4.3 Mediumgovulncheck-vulndbopenSUSEDenial of service via malformed User-Agent header in getBrowserVersion4.3 Mediumgovulncheck-vulndbopenSUSEDoS attack via login attempts with multi-megabyte passwords7.5 Highgovulncheck-vulndbopenSUSEInformation Disclosure via WebSocket Event When Deleting Unrevealed Burn on Read Posts4.3 Mediumgovulncheck-vulndbopenSUSEMemory Exhaustion via Malformed PSD File Upload4.3 Mediumgovulncheck-vulndbopenSUSEUnauthorized channel enumeration in private teams after member removal4.3 Mediumgovulncheck-vulndbopenSUSEWebSocket Message Spoofing via Permalink Embed Manipulation4.3 Mediumgovulncheck-vulndbopenSUSEMissing authorization check allows unauthorized modification of other users' comments on a board4.3 Mediumgovulncheck-vulndbopenSUSEUnauthorized access to invite ID during team creation4.3 Mediumgovulncheck-vulndbopenSUSEMS Teams plugin sensitive config values not properly masked in support packets7.6 Highgovulncheck-vulndbopenSUSEDenial of Service via Unbounded Memory Allocation in Integration Actions5.3 Mediumgovulncheck-vulndbopenSUSEGoBGP vulnerable to a denial of service via the NEXT_HOP path attribute7.5 Highgovulncheck-vulndbopenSUSEImproper Access Control in github.com/ctfer-io/monitoring7.1 Highgovulncheck-vulndbopenSUSESiYuan renderSprig: missing admin check allows any user to read full workspace DB6.5 Mediumgovulncheck-vulndbopenSUSEGokapi's File Request MaxSize Limit Bypassed via Multi-Chunk Upload4.3 Mediumgovulncheck-vulndbopenSUSEGokapi vulnerable to DoS in E2E Metadata Parser6.5 Mediumgovulncheck-vulndbopenSUSEGokapi has Privilege Escalation in File Replace4.1 Mediumgovulncheck-vulndbopenSUSESFTPGo improperly sanitizes placeholders in group home directories/key prefixes5.3 Mediumgovulncheck-vulndbopenSUSESFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy5.3 Mediumgovulncheck-vulndbopenSUSEGo ShangMi SM9 Infinity-Point Ciphertext Forgery Vulnerability7.5 Highgovulncheck-vulndbopenSUSEDagu has a Path Traversal via `dagRunId` in Inline DAG Execution9.1 Criticalgovulncheck-vulndbopenSUSECentrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL9.3 Criticalgovulncheck-vulndbopenSUSEElla Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings6.5 Mediumgovulncheck-vulndbopenSUSEElla Core: Unauthenticated AMF DoS via malformed InitialUEMessage with undersized integrity-protected NAS payload7.5 Highgovulncheck-vulndbopenSUSETinyauth vulnerable to TOTP/2FA bypass via OIDC authorize endpoint8.5 Highgovulncheck-vulndbopenSUSETinyauth's OIDC authorization codes are not bound to client on token exchange6.5 Mediumgovulncheck-vulndbopenSUSEConsul vulnerable to arbitrary file reads through the vault kubernetes authentication provider6.8 Mediumgovulncheck-vulndbopenSUSEAdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass9.8 Criticalgovulncheck-vulndbopenSUSESiYuan has a Full-Read SSRF via /api/network/forwardProxy8.3 Highgovulncheck-vulndbopenSUSEOliveTin Unauthorized Action Output Disclosure via EventStream7.1 Highgovulncheck-vulndbopenSUSEWorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode8.9 Highgovulncheck-vulndbopenSUSEImproper Restriction of Excessive Authentication Attempts in github.com/anyproto/anytype-heart3.6 Lowgovulncheck-vulndbopenSUSETraefik has a kubernetes gateway rule injection via unescaped backticks in HTTPRoute match values6.1 Mediumgovulncheck-vulndbopenSUSEArgo Workflows has unauthorized access to Argo Workflows Template9.8 Critical- Show moreLoading…