govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEFleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin6.3 Mediumgovulncheck-vulndbopenSUSEFleet's Apple MDM profile delivery has second-order SQL injection that can compromise the database6.2 Mediumgovulncheck-vulndbopenSUSEFleet's team maintainer can transfer hosts from any team via missing source team authorization4.9 Mediumgovulncheck-vulndbopenSUSEFleet's unbounded request body read allows remote Denial of Service8.7 Highgovulncheck-vulndbopenSUSEFleet: Password reset tokens remain valid after password change for 24 hours6.0 Mediumgovulncheck-vulndbopenSUSEMoby: AuthZ plugin bypass with oversized request body8.8 Highgovulncheck-vulndbopenSUSEMoby: Off-by-one error in plugin privilege validation6.8 Mediumgovulncheck-vulndbopenSUSEPublic dashboards discloses all direct mode datasources6.5 Mediumgovulncheck-vulndbopenSUSETraefik Vulnerable to BasicAuth/DigestAuth Identity Spoofing via Non-Canonical headerField5.1 Mediumgovulncheck-vulndbopenSUSETraefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass6.3 Mediumgovulncheck-vulndbopenSUSEAbitrary file write through systemd-creds option10.0 Criticalgovulncheck-vulndbopenSUSELocal Incus UI web server vulnerable to nuthentication bypass8.8 Highgovulncheck-vulndbopenSUSEIncus vulnerable to arbitrary file read and write through pongo templates10.0 Criticalgovulncheck-vulndbopenSUSEIncus vulnerable to denial of source through crafted bucket backup file6.5 Mediumgovulncheck-vulndbopenSUSEIncus vulnerable to local privilege escalation through VM screenshot path4.7 Mediumgovulncheck-vulndbopenSUSEIncus does not verify combined fingerprint when downloading images from simplestreams servers5.7 Mediumgovulncheck-vulndbopenSUSEElla Core Panics during NAS Authentication Response/Failure with missing IEs6.5 Mediumgovulncheck-vulndbopenSUSEElla Core has Privilege Escalation via Database Restore by NetworkManager role7.2 Highgovulncheck-vulndbopenSUSEElla Core has a Denial of Service via SCTP connection cleanup deadlock6.5 Mediumgovulncheck-vulndbopenSUSEElla Core panics when processing a crafted NGAP LocationReport message6.5 Mediumgovulncheck-vulndbopenSUSEMissing Protected-field Authorization in Provisioning Contact Points API5.4 Mediumgovulncheck-vulndbopenSUSEBuildKit Git URL subdir component can cause access to restricted files8.2 Highgovulncheck-vulndbopenSUSEBuildKit vulnerable to malicious frontend causing file escape outside of storage root8.4 Highgovulncheck-vulndbopenSUSEOpenFGA has an Authorization Bypass through cached keys5.8 Mediumgovulncheck-vulndbopenSUSECilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic5.4 Mediumgovulncheck-vulndbopenSUSEArbitrary File Read via Advanced Logging Support Packet6.8 Mediumgovulncheck-vulndbopenSUSEGuest users can view group member IDs without respecting view restrictions4.3 Mediumgovulncheck-vulndbopenSUSEZip Bomb Denial of Service via Unrestricted Archive Decompression6.5 Mediumgovulncheck-vulndbopenSUSEmmctl export download command doesn’t restrict permissions to created file to file owner5.0 Mediumgovulncheck-vulndbopenSUSETerminal Escape Injection in mmctl Report Posts Command8.0 Highgovulncheck-vulndbopenSUSEInsufficient authorization in shared channel membership sync grants team-level access instead of channel-level access5.4 Mediumgovulncheck-vulndbopenSUSEOpenBao has Reflected XSS in its OIDC authentication error message9.4 Criticalgovulncheck-vulndbopenSUSEOpenBao lacks user confirmation for OIDC direct callback mode9.6 Criticalgovulncheck-vulndbopenSUSEZoraxy: Authenticated Path Traversal in Config Import leads to RCE3.3 Lowgovulncheck-vulndbopenSUSESiYuan has directory traversal within its publishing service9.8 Criticalgovulncheck-vulndbopenSUSESiYuan has Arbitrary Document Reading within the Publishing Service9.8 Criticalgovulncheck-vulndbopenSUSEOOM from malicious IFD offset in golang.org/x/image/tiff5.3 Mediumgovulncheck-vulndbopenSUSENATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead7.5 Highgovulncheck-vulndbopenSUSECSRF vulnerability in UpdateAccessControlPolicyActiveStatus endpoint4.6 Mediumgovulncheck-vulndbopenSUSEDoS via URL Previews Rendering Malicious SVGs4.3 Mediumgovulncheck-vulndbopenSUSEAccount Takeover via Substring Matching in OpenID Connect Authentication5.7 Mediumgovulncheck-vulndbopenSUSEDenial of Service via HTTP/2 single packet attack on login endpoint4.3 Mediumgovulncheck-vulndbopenSUSEEch0 authenticated user-list exposed data via public `/api/allusers` endpoint5.3 Mediumgovulncheck-vulndbopenSUSENATS has mTLS verify_and_map authentication bypass via incorrect Subject DN matching4.2 Mediumgovulncheck-vulndbopenSUSENATS: Leafnode connections allow spoofing of Nats-Request-Info identity headers6.4 Mediumgovulncheck-vulndbopenSUSENATS Server: Incomplete Stripping of Nats-Request-Info Header Allows Identity Spoofing6.4 Mediumgovulncheck-vulndbopenSUSENATS JetStream has an authorization bypass through its Management API4.9 Mediumgovulncheck-vulndbopenSUSENATS is vulnerable to pre-auth DoS through WebSockets client service5.3 Mediumgovulncheck-vulndbopenSUSENATS has pre-auth server panic via leafnode handling7.5 Highgovulncheck-vulndbopenSUSENATS allows MQTT clients to bypass ACL checks7.1 High- Show moreLoading…