govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEomec-project amf NGAP Message handler.go null pointer dereference5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf handler.go RANConfiguration null pointer dereference5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf NGAP Message dispatcher.go memory corruption5.3 Mediumgovulncheck-vulndbopenSUSEomec-project amf handler.go NGSetupRequest memory corruption5.3 Mediumgovulncheck-vulndbopenSUSEBoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host9.6 Criticalgovulncheck-vulndbopenSUSEBoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files10.0 Criticalgovulncheck-vulndbopenSUSEpost edit time limit is not enforced on some post update operations3.1 Lowgovulncheck-vulndbopenSUSESVG content served through Mattermost image proxy despite Content-Type restrictions causes client-side denial of service4.3 Mediumgovulncheck-vulndbopenSUSEFrankenPHP: Unsafe Unicode Handling in CGI Path Splitting Allows Execution of Non-PHP Files8.1 Highgovulncheck-vulndbopenSUSEgh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection3.5 Lowgovulncheck-vulndbopenSUSEMCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claims3.5 Lowgovulncheck-vulndbopenSUSEKuma: Default kuma-cp leaks admin token cross-origin via CORS wildcard + LocalhostIsAdmin5.1 Mediumgovulncheck-vulndbopenSUSECrabbox < v0.12.0 Environment Variable Information Disclosure9.3 Criticalgovulncheck-vulndbopenSUSECrabbox < v0.12.0 Authentication Bypass via Header Spoofing8.7 Highgovulncheck-vulndbopenSUSEBilly: Path traversal vulnerabilities8.1 Highgovulncheck-vulndbopenSUSEPortainer: Missing authorization on custom template file endpoint exposes template content6.0 Mediumgovulncheck-vulndbopenSUSEPortainer: JWT accepted in URL query leaks tokens to logs and referers7.7 Highgovulncheck-vulndbopenSUSEPortainer: Endpoint security bypass via Swarm service create/update9.4 Criticalgovulncheck-vulndbopenSUSEPortainer: Kubernetes middleware continues after token validation failure, bypassing endpoint authorization8.1 Highgovulncheck-vulndbopenSUSEPortainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update8.5 Highgovulncheck-vulndbopenSUSEPortainer: Bind-mount restriction bypass via HostConfig.Mounts8.5 Highgovulncheck-vulndbopenSUSEPortainer: Path traversal in backup archive extraction allows arbitrary file write5.5 Mediumgovulncheck-vulndbopenSUSEPortainer: Missing authorization on Docker plugin endpoints allows host RCE9.4 Criticalgovulncheck-vulndbopenSUSEFleet: IP spoofing allows bypassing API rate limiting6.9 Mediumgovulncheck-vulndbopenSUSEFleet vulnerable to OS command injection in software packages6.0 Mediumgovulncheck-vulndbopenSUSEFleet server may terminate unexpectedly when handling certain gRPC requests8.7 Highgovulncheck-vulndbopenSUSEFleet Windows MDM Azure AD JWT Authentication Bypass8.2 Highgovulncheck-vulndbopenSUSEFleet has a rate limiting bypass via untrusted client IP headers6.9 Mediumgovulncheck-vulndbopenSUSEFleet has a Windows MDM management endpoint authentication bypass8.2 Highgovulncheck-vulndbopenSUSEpodinfo 6.11.2 Reflected XSS via /echo Endpoint5.1 Mediumgovulncheck-vulndbopenSUSESQL Expressions Read File From Disk6.3 Mediumgovulncheck-vulndbopenSUSEUsers can generate Service Account tokens after permissions removal5.9 Mediumgovulncheck-vulndbopenSUSESiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution9.0 Criticalgovulncheck-vulndbopenSUSESiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs7.2 Highgovulncheck-vulndbopenSUSEuniget: Command Injection in tool.Check Leading to Arbitrary Code Execution7.8 Highgovulncheck-vulndbopenSUSESiYuan: Broken access control in SiYuan publish-mode Readers can enumerate metadata4.3 Mediumgovulncheck-vulndbopenSUSESiYuan: Broken access control in SiYuan `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk4.3 Mediumgovulncheck-vulndbopenSUSETraefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false6.4 Mediumgovulncheck-vulndbopenSUSEgo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 Mediumgovulncheck-vulndbopenSUSEKlever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload8.6 Highgovulncheck-vulndbopenSUSEesm.sh: Path Traversal via package.json browser field allows reading arbitrary server files7.5 Highgovulncheck-vulndbopenSUSEesm.sh: Legacy Route Path Traversal Can Lead to RCE8.7 Highgovulncheck-vulndbopenSUSENomad vulnerable to path traversal in dynamic host volume which may lead to code execution8.8 Highgovulncheck-vulndbopenSUSENomad's exec2 task driver vulnerable to arbitrary file read/write on client host through symlink attack6.0 Mediumgovulncheck-vulndbopenSUSENomad vulnerable to arbitrary file read/write on client host through symlink attack6.0 Mediumgovulncheck-vulndbopenSUSEDalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode)7.5 Highgovulncheck-vulndbopenSUSEDalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode8.2 Highgovulncheck-vulndbopenSUSEDalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode7.5 Highgovulncheck-vulndbopenSUSEDalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode10.0 Criticalgovulncheck-vulndbopenSUSEPocket ID: OIDC refresh token flow bypasses authorization revocation, account disabling, and group restrictions8.5 High- Show moreLoading…