CVE-2023-32184

A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute code as the user that runs opensuse-welcome if a custom layout is chosen This issue affects opensuse-welcome: from 0.1 before 0.1.9+git.35.4b9444a.

• CWE-922

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32184Exploit, Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32184Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Sep 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32178VIPRE Antivirus Plus TelFileTransfer Link Following Local Pr…7.8
• CVE-2023-32179VIPRE Antivirus Plus FPQuarTransfer Link Following Local Pri…7.8
• CVE-2023-3218Race Condition within a Thread in GitHub repository it-novum…4.4
• CVE-2023-32181A Buffer Copy without Checking Size of Input ('Classic Buffe…6.5
• CVE-2023-32182A Improper Link Resolution Before File Access ('Link Followi…7.8
• CVE-2023-32183Incorrect Default Permissions vulnerability in the openSUSE …7.8
• CVE-2023-32186A Allocation of Resources Without Limits or Throttling vulne…7.5
• CVE-2023-32187An Allocation of Resources Without Limits or Throttling vuln…7.5
• CVE-2023-32188A user can reverse engineer the JWT token (JSON Web Token) u…9.4
• CVE-2023-32189Insecure handling of ssh keys used to bootstrap clients allo…6.4
• CVE-2023-3219The EventON WordPress plugin before 2.1.2 does not validate …5.3
• CVE-2023-32190mlocate's %post script allows RUN_UPDATEDB_AS user to make a…8.5