opensuse open build service vulnerabilities and exploits

(subscribe to this query)

9

CVSSv2

A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote malicious users to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privil...

Opensuse Open Build Service

6.8

CVSSv2

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed malicious users to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects:...

Opensuse Open Build Service

3.5

CVSSv2

A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote malicious users to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affect...

Opensuse Open Build Service

5.5

CVSSv2

A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service-download_files of openSUSE Open Build Service allows authenticated users to generate HTTP request against internal networks and potentially downloading data that is exposed there. This ...

Opensuse Open Build Service -

4.3

CVSSv2

a Improper Access Control vulnerability in of Open Build Service allows remote malicious users to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions before 2.10.5.

Opensuse Open Build Service Debian Debian Linux 9.0

4.3

CVSSv2

A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote malicious users to store arbitrary JS code to cause XSS. This issue affects: openSUSE open-build-service versions before 7cc32c8e2ff7290698e101d9a80a9dc29a5500fb.

Opensuse Open Build Service Debian Debian Linux 9.0

6.8

CVSSv2

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

Opensuse Open Build Service

7.8

CVSSv2

Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and...

1 Article

7.8

CVSSv2

Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consu...

1 Article

7.8

CVSSv2

Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer...

1 Article

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook