govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSEstatping-ng allows attackers to escalate privileges to Administrator and access sensitive components8.8 Highgovulncheck-vulndbopenSUSElinx-server has an issue in the uploadPostHandler component that allows attackers to cause a Denial of Service (DoS) via a crafted POST request7.5 Highgovulncheck-vulndbopenSUSEMCP Toolbox for Databases has an Origin Validation Error9.4 Criticalgovulncheck-vulndbopenSUSEOperator - Namespaced User Path Traversal6.4 Mediumgovulncheck-vulndbopenSUSEFile Browser: Command Allowlist Bypass via Shell Metacharacter Injection8.7 Highgovulncheck-vulndbopenSUSEFile Browser: Incorrect access control in public directory shares via rule path rebasing7.5 Highgovulncheck-vulndbopenSUSEFile Browser: Path traversal in download-as-zip/tar via Windows-style backslash separators in stored filenames6.8 Mediumgovulncheck-vulndbopenSUSEFile Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope7.5 Highgovulncheck-vulndbopenSUSEFile Browser: DoS Vulnerability on Public Login API6.5 Mediumgovulncheck-vulndbopenSUSEFile Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path8.4 Highgovulncheck-vulndbopenSUSENezha Monitoring: OAuth2 Redirect URL — Host Header Injection6.8 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Unbounded WebSocket Streams — Resource Exhaustion DoS6.5 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Stored future DDNS profile ID allows unauthorized use of another user's DDNS profile context6.4 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Authenticated users can claim the dashboard Host through NAT and preempt all dashboard routing6.5 Mediumgovulncheck-vulndbopenSUSENezha Monitoring: Pre-auth path traversal via /dashboard.. prefix confusion leaks jwt_secret_key9.1 Criticalgovulncheck-vulndbopenSUSEFile Browser: Cross-user unauthorized share-link deletion via unbounded prefix match in DeleteWithPathPrefix7.2 Highgovulncheck-vulndbopenSUSEFleet: Observer-level enrollment secret extraction via ORDER BY oracle on Apple MDM commands endpoint6.5 Mediumgovulncheck-vulndbopenSUSEFleet has observer-level enrollment secret extraction via ORDER BY oracle on labels host-listing endpoint6.5 Mediumgovulncheck-vulndbopenSUSERadius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs)7.7 Highgovulncheck-vulndbopenSUSEGoRest: InMemorySecret2FA race condition allows process crash via concurrent map access5.9 Mediumgovulncheck-vulndbopenSUSECVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync7.6 Highgovulncheck-vulndbopenSUSEMattermost group syncable endpoints allow privilege escalation via scheme_admin8.8 Highgovulncheck-vulndbopenSUSEPlugin bot username conflict allows user account to be used as bot identity in Mattermost Server5.3 Mediumgovulncheck-vulndbopenSUSE*Missing* {{invite_user}} *permission check on team creation allows unprivileged users to set open-invite and allowed-domains team settings*4.3 Mediumgovulncheck-vulndbopenSUSEMattermost Remote Cluster PATCH API Leaks Authentication Tokens6.5 Mediumgovulncheck-vulndbopenSUSEMattermost: Delegated admins could patch protected default system roles6.7 Mediumgovulncheck-vulndbopenSUSEMattermost fails to scope role_updated websocket events to authorized team and channel members4.3 Mediumgovulncheck-vulndbopenSUSEChisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection8.5 Highgovulncheck-vulndbopenSUSEDevGuard has improper authorization on public assets7.1 Highgovulncheck-vulndbopenSUSEArc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS8.8 Highgovulncheck-vulndbopenSUSETraefik StripPrefix Route-Level Auth Bypass via Path Normalization7.8 Highgovulncheck-vulndbopenSUSEfree5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence6.9 Mediumgovulncheck-vulndbopenSUSERekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic7.5 Highgovulncheck-vulndbopenSUSEnebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)5.5 Mediumgovulncheck-vulndbopenSUSEIncus has a Nil-Pointer Dereference Panic via Instance Backup Import (volume omitted)4.4 Mediumgovulncheck-vulndbopenSUSEnebula-mesh: Session and OIDC state cookies lack the Secure attribute4.6 Mediumgovulncheck-vulndbopenSUSEnebula-mesh: Decrypted CA private key persists in heap after signing6.9 Mediumgovulncheck-vulndbopenSUSEFission: Incomplete capability denylist in Environment/Function PodSpec validation allows tenant-added CAP_SYS_TIME and cross-tenant node wall-clock corruption8.5 Highgovulncheck-vulndbopenSUSEFission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks4.3 Mediumgovulncheck-vulndbopenSUSEFission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape3.6 Lowgovulncheck-vulndbopenSUSEFission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory7.7 Highgovulncheck-vulndbopenSUSEFission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation9.9 Criticalgovulncheck-vulndbopenSUSEFission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container4.9 Mediumgovulncheck-vulndbopenSUSEFission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape9.9 Criticalgovulncheck-vulndbopenSUSEFission Container Executor Function PodSpec Injection Leading to Node Escape9.9 Criticalgovulncheck-vulndbopenSUSEFission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover9.9 Criticalgovulncheck-vulndbopenSUSEFission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook8.5 Highgovulncheck-vulndbopenSUSEOpenTelemetry Operator: ServiceMonitor bearerTokenFile reads arbitrary local file and sends contents as bearer auth7.7 Highgovulncheck-vulndbopenSUSEFission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook7.7 Highgovulncheck-vulndbopenSUSEFission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance7.7 High- Show moreLoading…