Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
opensuse build service vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2018-12478
A Improper Input Validation vulnerability in Open Build Service allows remote malicious users to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.
Opensuse Open Build Service -
605
VMScore
CVE-2021-36777
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed malicious users to present users with a expected login form that then sends the clear text credentials to an attacker specified server. This issue affects:...
Opensuse Open Build Service
356
VMScore
CVE-2013-3703
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated malicious user to add or remove user roles from packages and/or project meta data.
Opensuse Open Build Service
445
VMScore
CVE-2011-4181
A vulnerability in open build service allows remote malicious users to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 (for 2.1) and before version 2.3.
Opensuse Open Build Service
668
VMScore
CVE-2011-4183
A vulnerability in open build service allows remote malicious users to upload arbitrary RPM files. Affected releases are SUSE open build service before 2.1.16.
Opensuse Open Build Service
356
VMScore
CVE-2017-9268
In the open build service prior to 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause operations on projects where they did not have permissions leading to denial of service (resource consumption).
Opensuse Open Build Service
312
VMScore
CVE-2020-8031
A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote malicious users to store JS code in markdown that is not properly escaped, impacting confidentiality and integrity. This issue affect...
Opensuse Open Build Service
578
VMScore
CVE-2011-3178
In the web ui of the openbuildservice prior to 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized malicious users to execute shellcode.
Opensuse Open Build Service
490
VMScore
CVE-2018-12467
Authorized users of the openbuildservice prior to 2.9.4 could delete packages by using a malicious request against projects having the OBS:InitializeDevelPackage attribute, a similar issue to CVE-2018-7689.
Opensuse Open Build Service
445
VMScore
CVE-2018-12479
A Improper Input Validation vulnerability in Open Build Service allows remote malicious users to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions before 01b015ca2a320afc4fae823465d1e72da8bd60df.
Opensuse Open Build Service
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »