govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEFileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory9.3 Criticalgovulncheck-vulndbopenSUSEGitHub OAuth Scope Validation5.4 Mediumgovulncheck-vulndbopenSUSEPersistent notification timing attack causing server denial of service6.5 Mediumgovulncheck-vulndbopenSUSEImproper file ownership validation in the Boards API allows unauthorised file access5.9 Mediumgovulncheck-vulndbopenSUSEInsufficient input validation in GitHub plugin API causes denial of service4.3 Mediumgovulncheck-vulndbopenSUSESanitize team member data returned by API4.3 Mediumgovulncheck-vulndbopenSUSEUnauthenticated WebSocket binary frame causes denial of service in Mattermost Server7.5 Highgovulncheck-vulndbopenSUSEMissing request body size limits on Zoom plugin HTTP endpoints4.9 Mediumgovulncheck-vulndbopenSUSEDenial of service via crafted TIFF file upload6.5 Mediumgovulncheck-vulndbopenSUSEInvoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html6.1 Mediumgovulncheck-vulndbopenSUSEInvoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html6.1 Mediumgovulncheck-vulndbopenSUSEInvoking duplicate attributes can cause XSS in golang.org/x/net/html6.1 Mediumgovulncheck-vulndbopenSUSEInvoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html6.1 Mediumgovulncheck-vulndbopenSUSEInvoking denial of service when parsing arbitrary HTML in golang.org/x/net/html6.5 Mediumgovulncheck-vulndbopenSUSEInvoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent5.3 Mediumgovulncheck-vulndbopenSUSEInvoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh7.5 Highgovulncheck-vulndbopenSUSEInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh10.0 Criticalgovulncheck-vulndbopenSUSEInvoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts9.1 Criticalgovulncheck-vulndbopenSUSEInvoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh5.3 Mediumgovulncheck-vulndbopenSUSEInvoking infinite loop on large channel writes in golang.org/x/crypto/ssh9.1 Criticalgovulncheck-vulndbopenSUSEInvoking key constraints not enforced in golang.org/x/crypto/ssh/agent9.1 Criticalgovulncheck-vulndbopenSUSEInvoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent9.1 Criticalgovulncheck-vulndbopenSUSEInvoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh9.1 Criticalgovulncheck-vulndbopenSUSEInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh9.1 Criticalgovulncheck-vulndbopenSUSEInvoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh7.5 Highgovulncheck-vulndbopenSUSEInvoking bypass of certificate restrictions in golang.org/x/crypto/ssh6.3 Mediumgovulncheck-vulndbopenSUSEInvoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh6.5 Mediumgovulncheck-vulndbopenSUSEcontainerd user ID handling bypass allows runAsNonRoot evasion7.3 Highgovulncheck-vulndbopenSUSESpiceDB: Caveat structures with nested lists can result in improper cache reuse2.3 Lowgovulncheck-vulndbopenSUSEFission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables6.9 Mediumgovulncheck-vulndbopenSUSEFission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read8.7 Highgovulncheck-vulndbopenSUSEFission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger9.8 Criticalgovulncheck-vulndbopenSUSEFission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives8.8 Highgovulncheck-vulndbopenSUSEKlever-Go KVM read-only execution can commit contract delete and upgrade side effects6.3 Mediumgovulncheck-vulndbopenSUSEApache Camel K: Camel K Cross-Namespace Build Deputy Attack8.1 Highgovulncheck-vulndbopenSUSEPath traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.8.0 Highgovulncheck-vulndbopenSUSEInsufficient permission validation on cross-team playbook run creation4.3 Mediumgovulncheck-vulndbopenSUSEOpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens5.3 Mediumgovulncheck-vulndbopenSUSEOpenBao's Inline Auth Incorrectly Redacted Headers5.4 Mediumgovulncheck-vulndbopenSUSEOpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL7.1 Highgovulncheck-vulndbopenSUSEAlgernon: Auto-refresh SSE event server sets Access-Control-Allow-Origin: *4.3 Mediumgovulncheck-vulndbopenSUSEAlgernon: Auto-refresh SSE event server binds to all interfaces by default on Linux/macOS4.3 Mediumgovulncheck-vulndbopenSUSECaddy Defender trusted proxy client IP bypass8.2 Highgovulncheck-vulndbopenSUSEFileBrowser Quantum: unauthenticated user share share info8.7 Highgovulncheck-vulndbopenSUSEDasel: Denial of service in dasel selector lexer due to infinite loop on unterminated regex literal6.2 Mediumgovulncheck-vulndbopenSUSEDasel: Index-out-of-range panic in dasel selector lexer on trailing backslash in quoted string6.2 Mediumgovulncheck-vulndbopenSUSECoder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft9.1 Criticalgovulncheck-vulndbopenSUSECoder vulnerable to unauthenticated SSRF via Azure Instance Identity Endpoint6.5 Mediumgovulncheck-vulndbopenSUSEKopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used9.8 Criticalgovulncheck-vulndbopenSUSEArgo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation7.3 High- Show moreLoading…