Open Build Service (Suse) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-05-03. Vendor: Suse.

CVEs of Open Build Service

• CVE-2022-21949 - CVSS 8.8 (high), 2022-05-03: A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in…
• CVE-2011-4183 - CVSS 9.8 (critical), 2018-06-13: A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.
• CVE-2011-4181 - CVSS 7.5 (high), 2018-06-11: A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE…
• CVE-2015-0796 - CVSS 7.8 (high), 2018-03-02: In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like…
• CVE-2017-9268 - CVSS 6.5 (medium), 2018-03-01: In the open build service before 201707022 the wipetrigger and rebuild actions checked the wrong project for permissions, allowing authenticated users to…