Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 122

Export CSV
CVE-2013-3703

No write permission check in change_role command

The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Opensuse
Products
Open Build Service
CVE-2012-5628

gofer: /var/lib/gofer/journal/watchdog is world writable

gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Gofer Project
Products
Gofer