govulncheck-vulndb vulnerabilities (openSUSE)
2,654 vulnerabilities.
govulncheck-vulndbopenSUSESiYuan: Path Traversal via Double URL Encoding in /assets/*path (publish mode arbitrary file─read)7.5 Highgovulncheck-vulndbopenSUSEOliveTin has Unvalidated `ot_`-prefixed Arguments that Bypass Input Filtering4.3 Mediumgovulncheck-vulndbopenSUSEopentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent6.2 Mediumgovulncheck-vulndbopenSUSEGogs: Unauthenticated Jupyter Notebook (ipynb) Sanitizer allows arbitrary data: URIs leading to XSS5.4 Mediumgovulncheck-vulndbopenSUSEGogs: Unauthenticated Organization Teams Information Disclosure via API5.5 Mediumgovulncheck-vulndbopenSUSEGogs: Unauthenticated Asymmetric Denial of Service (DoS) via SSH Handshake Stall (File Descriptor Exhaustion)5.5 Mediumgovulncheck-vulndbopenSUSEGogs: Path Traversal in organization name results in RCE through Git hooks10.0 Criticalgovulncheck-vulndbopenSUSEGogs: LFS dedupe path leaks private repo content across tenants7.1 Highgovulncheck-vulndbopenSUSEGogs: UploadRepoFiles writes outside repo working tree via committed parent sym9.0 Criticalgovulncheck-vulndbopenSUSEGogs: Write to readonly repositories using receive-pack + service=git-upload-pack confusion7.1 Highgovulncheck-vulndbopenSUSEGogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVES6.8 Mediumgovulncheck-vulndbopenSUSEGogs: Write-level collaborators can mutate admin-only repository settings via API7.1 Highgovulncheck-vulndbopenSUSEGogs: DOM-based XSS via Milestone Name on New Issue Page4.8 Mediumgovulncheck-vulndbopenSUSEGogs: RCE via git rebase --exec argument injection in pull request merge9.9 Criticalgovulncheck-vulndbopenSUSEGogs: Migration Redirect Bypass Leads to Internal Repository Theft8.7 Highgovulncheck-vulndbopenSUSEGogs: Privilege Escalation via Collaboration Access Mode Validation5.5 Mediumgovulncheck-vulndbopenSUSEGogs: Open Redirect via redirect_to in Gogs5.4 Mediumgovulncheck-vulndbopenSUSEGogs: Ability to import local repositories via Mirror Settings8.1 Highgovulncheck-vulndbopenSUSEGogs: CSRF Leading to Organization Owner Takeover8.8 Highgovulncheck-vulndbopenSUSEGogs: Missing Authorization in Attachment Download7.5 Highgovulncheck-vulndbopenSUSEGogs: Stored XSS in `.ipynb` Preview8.9 Highgovulncheck-vulndbopenSUSEGogs: DoS in rendering issue index pattern3.5 Lowgovulncheck-vulndbopenSUSEGogs: SSRF in webhook deliveries8.3 Highgovulncheck-vulndbopenSUSEInspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF2.9 Lowgovulncheck-vulndbopenSUSEGophish 0.12.1 Denial of Service via Office Document Upload7.1 Highgovulncheck-vulndbopenSUSEGogs: Authentication Bypass via Unvalidated Reverse Proxy Headers7.7 Highgovulncheck-vulndbopenSUSEGogs: Denial of Service in repository/wiki file listing web pages4.9 Mediumgovulncheck-vulndbopenSUSESpiceDBChecks involving relations with caveats can result in unconditional permission when conditional permission is expected3.7 Lowgovulncheck-vulndbopenSUSEOpenBao: Transit secrets engine crashes on key creation with `derived: true` for asymmetric key types6.5 Mediumgovulncheck-vulndbopenSUSEOpenBao's System Backend allows Unauthorized Management of the containing Namespace2.3 Lowgovulncheck-vulndbopenSUSEOpenBao: Cross-namespace lease revocation/renewal via canonical sys/leases/{revoke,renew} — incomplete fix of CVE-2026-458082.1 Lowgovulncheck-vulndbopenSUSEOpenBao: LDAPi ldaputil (wrong escape func)6.8 Mediumgovulncheck-vulndbopenSUSEMailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)5.8 Mediumgovulncheck-vulndbopenSUSEMiniflux 2: Open Redirect Bypass5.1 Mediumgovulncheck-vulndbopenSUSETraefik Kubernetes Ingress NGINX provider fails open when auth-secret resolution fails5.9 Mediumgovulncheck-vulndbopenSUSEqbee transport: Symlink-chain path traversal in tar extraction (one level outside destination)6.0 Mediumgovulncheck-vulndbopenSUSEAuthelia has an Edge Case Access Control Rule Mismatch1.3 Lowgovulncheck-vulndbopenSUSEcontainerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull9.4 Criticalgovulncheck-vulndbopenSUSEcontainerd: CRI checkpoint import allows local image tag poisoning5.6 Mediumgovulncheck-vulndbopenSUSEgonic has arbitrary file write in createPlaylist: any authenticated user can write playlist M3U content to attacker-controlled path on the host8.1 Highgovulncheck-vulndbopenSUSESubsonic API: any authenticated user can delete or read any other user's playlist (IDOR)7.1 Highgovulncheck-vulndbopenSUSETempo TraceQL query with exemplar hint could result in unbounded memory usage6.5 Mediumgovulncheck-vulndbopenSUSEPath traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist7.1 Highgovulncheck-vulndbopenSUSEOpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset6.8 Mediumgovulncheck-vulndbopenSUSETilt: Missing authentication on the network-exposed Tilt HUD server9.2 Criticalgovulncheck-vulndbopenSUSETilt: Cross-site WebSocket hijacking of the Tilt HUD stream8.3 Highgovulncheck-vulndbopenSUSETilt: Unauthenticated pprof debug endpoints on the Tilt HUD server8.3 Highgovulncheck-vulndbopenSUSECommand injection through unsanitized YAML parameter in Rancher9.4 Criticalgovulncheck-vulndbopenSUSEMicroCeph path traversal issue in the remote-import API5.1 Mediumgovulncheck-vulndbopenSUSELack of limit on tile sizes in x/image/tiff in golang.org/x/image7.5 High- Show moreLoading…