Skip to content
OpenAdvisories

Archive

9 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /9 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2018-12479

    Request controller allows to create requests with arbitrary request IDs

    A Improper Input Validation vulnerability in Open Build Service allows remote attackers to cause DoS by specifying crafted request IDs. Affected releases are openSUSE Open Build Service: versions prior to 01b015ca2a320afc4fae823465d1e72da8bd60df.

    openSUSE open build service open-build-service open-build-service Debian Ubuntu
  • Medium 4.8
    CVE-2018-12478

    obs-service-replace_using_package_version allows to specify arbitrary input files

    A Improper Input Validation vulnerability in Open Build Service allows remote attackers to extract files from the system where the service runs. Affected releases are openSUSE Open Build Service: status of is unknown.

    openSUSE open build service
  • Medium 5.4
    CVE-2018-12474

    Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm

    Improper input validation in obs-service-tar_scm of Open Build Service allows remote attackers to cause access and extract information outside the current build or cause the creation of file in attacker controlled locations. Affected releases are openSUSE Ope…

    openSUSE open build service