govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSETekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL7.7 Highgovulncheck-vulndbopenSUSETekton Pipelines: VerificationPolicy regex pattern bypass via substring matching6.5 Mediumgovulncheck-vulndbopenSUSENeko has Self-service Privilege Escalation for Authenticated Users8.8 Highgovulncheck-vulndbopenSUSEOpenBao's Token Store Allows Cross-Namespace Renewal, Revocation2.0 Lowgovulncheck-vulndbopenSUSEOpenBao allows SQL Injection in PostgreSQL database secrets engine4.6 Mediumgovulncheck-vulndbopenSUSEOpenBao has Decompression Bomb via Unbounded Copy in OCI Plugin Extraction (DoS)3.1 Lowgovulncheck-vulndbopenSUSEOpenBao's Certificate Authentication Allows Token Renewal With Different Certificate2.0 Lowgovulncheck-vulndbopenSUSENginx-UI vulnerable to Cross-Site WebSocket Hijacking (CSWSH) via missing origin validation on all WebSocket endpoints5.5 Mediumgovulncheck-vulndbopenSUSENginx-UI: Disabled users retain full API access through previously issued bearer tokens8.6 Highgovulncheck-vulndbopenSUSEusememos UpdateInstanceSetting App.tsx memos_access_token improper authorization5.3 Mediumgovulncheck-vulndbopenSUSENuclei: Environment variable disclosure via Response-Derived DSL Expressions5.3 Mediumgovulncheck-vulndbopenSUSERClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution9.2 Criticalgovulncheck-vulndbopenSUSERclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution9.2 Criticalgovulncheck-vulndbopenSUSEWish has SCP Path Traversal that allows arbitrary file read/write9.6 Criticalgovulncheck-vulndbopenSUSENhost Vulnerable to Account Takeover via OAuth Email Verification Bypass9.3 Criticalgovulncheck-vulndbopenSUSEgo-git Credential leak via cross-host redirect in smart HTTP transport4.7 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Privileged Java agent injection allows arbitrary host file overwrite via untrusted TMPDIR8.4 Highgovulncheck-vulndbopenSUSEDapr: Service Invocation path traversal ACL bypass8.1 Highgovulncheck-vulndbopenSUSEVault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations7.5 Highgovulncheck-vulndbopenSUSEVault Token Leaked to Backends via Authorization: Bearer Passthrough Header7.5 Highgovulncheck-vulndbopenSUSEVault Vulnerable to Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS5.3 Mediumgovulncheck-vulndbopenSUSEVault KVv2 Metadata and Secret Deletion Policy Bypass Denial-of-Service8.1 Highgovulncheck-vulndbopenSUSEIstio Vulnerable to SSRF via RequestAuthentication jwksUri5.0 Mediumgovulncheck-vulndbopenSUSEKyverno: ServiceAccount token leaked to external servers via apiCall service URL8.1 Highgovulncheck-vulndbopenSUSEKyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)7.7 Highgovulncheck-vulndbopenSUSELego: Arbitrary File Write via Path Traversal in Webroot HTTP-01 Provider8.8 Highgovulncheck-vulndbopenSUSEzrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records5.3 Mediumgovulncheck-vulndbopenSUSEzrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing7.5 Highgovulncheck-vulndbopenSUSEzrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering6.1 Mediumgovulncheck-vulndbopenSUSESpdyStream: DOS on CRI8.7 Highgovulncheck-vulndbopenSUSEIstio AuthorizationPolicy Incorrect Regex Matching of Dots in serviceAccounts Fields Allows Policy Bypass5.4 Mediumgovulncheck-vulndbopenSUSEDgraph: Unauthenticated pprof endpoint leaks admin auth token9.4 Criticalgovulncheck-vulndbopenSUSELoki Path Traversal - CVE-2021-36156 Bypass5.3 Mediumgovulncheck-vulndbopenSUSEOAuth2 Proxy has an Authentication Bypass via Fragment Confusion in skip_auth_routes and skip_auth_regex8.2 Highgovulncheck-vulndbopenSUSEOAuth2 Proxy has an Authorization Bypass in Email Domain Validation via Malformed Multi-@ Email Claims6.8 Mediumgovulncheck-vulndbopenSUSEOAuth2 Proxy has an Authentication Bypass via X-Forwarded-Uri Header Spoofing9.1 Criticalgovulncheck-vulndbopenSUSESensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection9.1 Criticalgovulncheck-vulndbopenSUSEKubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation5.4 Mediumgovulncheck-vulndbopenSUSEVelociraptor Query() Plugin Misapplies Permissions To Orgs8.0 Highgovulncheck-vulndbopenSUSERace Condition in Guest Magic Link Authentication Allows Token Reuse6.5 Mediumgovulncheck-vulndbopenSUSECSRF Protection Bypass Allows Updating a User's Authentication Method6.8 Mediumgovulncheck-vulndbopenSUSEConnected Workspaces: Malicious remote server can manipulate arbitrary user's status2.7 Lowgovulncheck-vulndbopenSUSEgoldmark vulnerable to Cross-site Scripting (XSS)5.1 Mediumgovulncheck-vulndbopenSUSENietThijmen ShoppingCart: Command injection in the connect function8.4 Highgovulncheck-vulndbopenSUSEMinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads8.8 Highgovulncheck-vulndbopenSUSEfrp: Authentication bypass in frp HTTP vhost routing when routeByHTTPUser is used for access control6.5 Mediumgovulncheck-vulndbopenSUSEOxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles6.9 Mediumgovulncheck-vulndbopenSUSEOxia: Server crash via race condition in session heartbeat handling8.7 Highgovulncheck-vulndbopenSUSEOxia: OIDC token audience validation bypass via SkipClientIDCheck9.2 Criticalgovulncheck-vulndbopenSUSEOxia: Bearer token exposed in debug log messages on authentication failure8.7 High- Show moreLoading…