EUVD-2014-0624

Malware in sbrugna...

EUVD-2022-27105

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-12475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Externally Controlled Reference to a Resource in Another Sphere vulnerability in obs-service- downloadfiles of openSUSE Open Build Service allows authenticate...

Linux Distros Unpatched Vulnerability : CVE-2020-8021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabl...

Linux Distros Unpatched Vulnerability : CVE-2020-8031

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Open Build Service allows remote attackers to store JS cod...

Linux Distros Unpatched Vulnerability : CVE-2019-3685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary CVE-2019-3685 Note that Nessus reli...

Linux Distros Unpatched Vulnerability : CVE-2020-8020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Improper Neutralization of Input During Web Page Generation vulnerability in open-build-service allows remote attackers to store arbitrary JS code to cause XS...

Linux Distros Unpatched Vulnerability : CVE-2018-12479

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are...

Linux Distros Unpatched Vulnerability : CVE-2017-5188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during...

Linux Distros Unpatched Vulnerability : CVE-2017-9268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to cause...

Linux Distros Unpatched Vulnerability : CVE-2018-7688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing permission check in the review handling of openSUSE Open Build Service before 2.9.3 allowed all authenticated users to modify sources in projects wher...

Linux Distros Unpatched Vulnerability : CVE-2018-7689

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of permission checks in the InitializeDevelPackage function in openSUSE Open Build Service before 2.9.3 allowed authenticated users to modify packages wher...

Debian dla-4122 : libbssolv-perl - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4122 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4122-1 [email protected] https://www.debian.org/lts/security/...

Linux Distros Unpatched Vulnerability : CVE-2022-21949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certa...

OESA-2024-2133 osc security update

The osc is an opensuse-commander with svn like handling. It's a command line interface to work with an Open Build Service. Security Fixes: CVE-2024-22034...

[SECURITY] Fedora 41 Update: osc-1.9.1-420.1.1.fc41

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

[SECURITY] Fedora 40 Update: osc-1.9.1-420.1.1.fc40

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

[SECURITY] Fedora 39 Update: osc-1.9.1-420.1.1.fc39

Commandline client for the Open Build Service. See http://en.opensuse.org/openSUSE:OSC , as well as http://en.opensuse.org/openSUSE:BuildServiceTutorial for a general introduction...

SUSE CVE-2011-0466

The API in SUSE openSUSE Build Service OBS 2.0.x before 2.0.8 and 2.1.x before 2.1.6 allows attackers to bypass intended write-access restrictions and modify a 1 package or 2 project via unspecified vectors...

SUSE CVE-2011-0469

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011...