govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEArgo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations6.3 Mediumgovulncheck-vulndbopenSUSEMailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes7.5 Highgovulncheck-vulndbopenSUSEMailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)5.9 Mediumgovulncheck-vulndbopenSUSEMailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs5.9 Mediumgovulncheck-vulndbopenSUSEMailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer5.8 Mediumgovulncheck-vulndbopenSUSECaddy: Remote Admin Authorization Bypass in `/config` API via Array Index Normalization5.4 Mediumgovulncheck-vulndbopenSUSEzrok copy writes attacker-controlled WebDAV paths outside the destination root8.3 Highgovulncheck-vulndbopenSUSEgo-git: Crafted repositories may modify main and submodule .git directories5.4 Mediumgovulncheck-vulndbopenSUSEgo-git: Improper single-quote escaping in go-git SSH transport2.3 Lowgovulncheck-vulndbopenSUSEAlgernon: handler.lua discovery walks parent directories above the server root9.0 Criticalgovulncheck-vulndbopenSUSEAlgernon: Single-file mode unconditionally enables debug mode7.5 Highgovulncheck-vulndbopenSUSEgohttp is vulnerable to directory traversal via a crafted request7.3 Highgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI7.5 Highgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages7.5 Highgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Log enricher writev path can overread and overwrite user buffers4.9 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals5.1 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure3.8 Lowgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size5.9 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU5.9 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads7.5 Highgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages6.5 Mediumgovulncheck-vulndbopenSUSEOpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent5.5 Mediumgovulncheck-vulndbopenSUSEMoby: Race condition in docker cp allows bind mount redirection to host path7.2 Highgovulncheck-vulndbopenSUSEMoby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap6.1 Mediumgovulncheck-vulndbopenSUSEDocker: `PUT /containers/{id}/archive` executes container binary on the host7.2 Highgovulncheck-vulndbopenSUSETinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection8.2 Highgovulncheck-vulndbopenSUSEDozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)8.6 Highgovulncheck-vulndbopenSUSEiskorotkov/avro: CPU Exhaustion in Avro Decoder8.7 Highgovulncheck-vulndbopenSUSEiskorotkov/avro: Integer Overflow in Avro Decoder8.7 Highgovulncheck-vulndbopenSUSEArcane: Unauthenticated reflected XSS via SVG color parameter in /api/app-images/logo enables admin account takeover8.2 Highgovulncheck-vulndbopenSUSEArcane: OS Command Injection in Volume Browser ListDirectory via path query parameter6.3 Mediumgovulncheck-vulndbopenSUSEArcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs9.9 Criticalgovulncheck-vulndbopenSUSECaddy: Unsafe Unicode Handling in FastCGI splitPos Allows Execution of Non-PHP Files8.1 Highgovulncheck-vulndbopenSUSESSRF via Host Header Spoofing in Custom Slash Commands3.5 Lowgovulncheck-vulndbopenSUSEPrevent password disclosure and force reset during Slack import6.5 Mediumgovulncheck-vulndbopenSUSESensitive credentials exposed in plaintext in Mattermost support packets8.7 Highgovulncheck-vulndbopenSUSESlash command trigger-word update allowed command hijacking4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Playbooks Plugin fails to enforce view permissions in list endpoints, allowing unauthorized access to public playbooks4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Calls plugin exposes TURN server credentials in plaintext in support packets7.6 Highgovulncheck-vulndbopenSUSEMissing authorization check in AI message rewrite endpoint allows access to private thread content6.5 Mediumgovulncheck-vulndbopenSUSEPlaybooks Plugin fails to validate team transfers, allowing unauthorized removal of member access via playbook update3.1 Lowgovulncheck-vulndbopenSUSEMissing request origin validation on burn-on-read reveal endpoint4.3 Mediumgovulncheck-vulndbopenSUSEMemory Exhaustion via Malicious 7zip File Upload4.3 Mediumgovulncheck-vulndbopenSUSEUnescaped variables during error page composition3.8 Lowgovulncheck-vulndbopenSUSEInsufficient token rotation validation in remote cluster invite confirmation3.7 Lowgovulncheck-vulndbopenSUSEMattermost fails to enforce create_post permission when editing posts4.3 Mediumgovulncheck-vulndbopenSUSEImproper Input Validation in MS Teams Meetings API Handler4.3 Mediumgovulncheck-vulndbopenSUSEInsufficient authorization in shared channel membership sync allows remote cluster to remove users from arbitrary channels4.3 Mediumgovulncheck-vulndbopenSUSEOAuth authorization code client binding not enforced during token redemption in Mattermost3.1 Lowgovulncheck-vulndbopenSUSEomec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference5.3 Medium- Show moreLoading…