Lucene search
+L

180 matches found

Tenable Nessus
Tenable Nessus
added 2020/07/20 12:0 a.m.39 views

openSUSE Security Update : osc (openSUSE-2020-852)

This update for osc to 0.169.1 fixes the following issues : Security issue fixed : - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675. Non-security issues fixed : - Improved the speed and usability of osc bash completion. - improved some error...

9.8CVSS6.9AI score0.01424EPSS
SaveExploits1References2
OSV
OSV
added 2020/07/08 7:55 a.m.20 views

SUSE-SU-2020:1695-2 Security update for osc

This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675. Non-security issues fixed: - Improved the speed and usability of osc bash completion. - improved some error message...

9.8CVSS9.4AI score0.01424EPSS
SaveExploits1References3
NVD
NVD
added 2020/06/29 12:15 p.m.25 views

CVE-2019-3681

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

9.8CVSS0.01424EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/29 12:15 p.m.5 views

DEBIAN-CVE-2019-3681

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

9.8CVSS7.2AI score0.01424EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/29 12:15 p.m.7 views

CVE-2019-3681

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

9.8CVSS9.4AI score
SaveExploits0References1
OSV
OSV
added 2020/06/29 12:15 p.m.4 views

UBUNTU-CVE-2019-3681

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

9.8CVSS5.9AI score0.01424EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2020/06/29 12:0 p.m.29 views

CVE-2019-3681 osc: stores downloaded (supposed) RPM in network-controlled filesystem paths

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...

7.5CVSS9.4AI score0.01424EPSS
SaveExploits1References1
CVE
CVE
added 2020/06/29 12:0 p.m.164 views

CVE-2019-3681

The CVE-2019-3681 issue affects the osc component used in SUSE/openSUSE environments. Affected osc versions include: SUSE Linux Enterprise Module for Development Tools 15 (before 0.169.1-3.20.1), SUSE Linux Enterprise Software Development Kit 12-SP5 and 12-SP4 (before 0.162.1-15.9.1), openSUSE Le...

9.8CVSS8.5AI score0.01424EPSS
SaveExploits1References1Affected Software1
OpenVAS
OpenVAS
added 2020/06/23 12:0 a.m.30 views

openSUSE: Security Advisory for osc (openSUSE-SU-2020:0852-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.01424EPSS
SaveExploits1References2
OSV
OSV
added 2020/06/22 6:18 p.m.6 views

OPENSUSE-SU-2020:0852-1 Security update for osc

This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675. Non-security issues fixed: - Improved the speed and usability of osc bash completion. - improved some error message...

9.8CVSS9.4AI score0.01424EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
added 2020/06/22 12:0 a.m.56 views

Security update for osc (moderate)

openSUSE Security Update: Security update for osc Announcement ID: openSUSE-SU-2020:0852-1 Rating: moderate References: 1122675 Cross-References: CVE-2019-3681 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for osc to 0.169....

9.8CVSS9.3AI score0.01424EPSS
SaveExploits1References1
OSV
OSV
added 2020/06/19 12:54 p.m.6 views

SUSE-SU-2020:1695-1 Security update for osc

This update for osc to 0.169.1 fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675. Non-security issues fixed: - Improved the speed and usability of osc bash completion. - improved some error message...

9.8CVSS9.4AI score0.01424EPSS
SaveExploits1References3
OSV
OSV
added 2020/06/03 12:21 p.m.10 views

SUSE-SU-2020:1528-1 Security update for osc

This update for osc fixes the following issues: Security issue fixed: - CVE-2019-3681: Fixed an insufficient validation of network-controlled filesystem paths bsc1122675...

9.8CVSS9.5AI score0.01424EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2020/02/24 5:15 p.m.27 views

CVE-2020-9366

A buffer overflow was found in the way GNU Screen before 4.8.0 treated the special escape OSC 49. Specially crafted output, or a special program, could corrupt memory and crash Screen or possibly have unspecified other impact...

9.8CVSS7.3AI score0.02706EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.20 views

openSUSE: Security Advisory for osc (openSUSE-SU-2019:1844-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.7CVSS7.8AI score0.00714EPSS
SaveExploits1References2
NVD
NVD
added 2019/11/05 10:15 a.m.33 views

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

7.7CVSS7.7AI score0.00714EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/05 10:15 a.m.9 views

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

7.7CVSS7.1AI score0.00714EPSS
SaveExploits1References1
OSV
OSV
added 2019/11/05 10:15 a.m.7 views

UBUNTU-CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

7.7CVSS7.1AI score0.00714EPSS
SaveExploits1References2
Prion
Prion
added 2019/11/05 10:15 a.m.26 views

Open redirect

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

6.8CVSS7.5AI score0.00714EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/05 10:15 a.m.26 views

CVE-2019-3685

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary...

7.7CVSS7.1AI score0.00714EPSS
SaveExploits1References1
Rows per page
Query Builder