| CVE-2020-8031 |
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build…
|
6.3
Moyenne
|
11 févr. 2021 |
| CVE-2018-12475 |
A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of…
|
6.5
Moyenne
|
1 sept. 2020 |
| CVE-2020-8021 |
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package…
|
5.3
Moyenne
|
19 mai 2020 |
| CVE-2018-12477 |
A Improper Neutralization of CRLF Sequences vulnerability in Open Build Service allows remote attackers to cause…
|
3.5
Faible
|
9 oct. 2018 |
| CVE-2018-12474 |
Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and…
|
5.4
Moyenne
|
9 oct. 2018 |
| CVE-2018-12479 |
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying…
|
6.5
Moyenne
|
9 oct. 2018 |
| CVE-2018-12478 |
A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system…
|
4.8
Moyenne
|
9 oct. 2018 |
| CVE-2018-12473 |
A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause…
|
3.1
Faible
|
2 oct. 2018 |
| CVE-2013-3703 |
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an…
|
8.8
Élevée
|
8 juin 2018 |
| CVE-2014-0594 |
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface,…
|
8.8
Élevée
|
8 juin 2018 |
| CVE-2018-7689 |
Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed…
|
7.1
Élevée
|
7 juin 2018 |
| CVE-2018-7688 |
A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all…
|
7.1
Élevée
|
7 juin 2018 |
| CVE-2017-5188 |
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside…
|
5.0
Moyenne
|
1 mars 2018 |