Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-56004

obs-service-tar_scm: command injection via mercurial handler

A shellcode injection in the mercurial handler of the obs tar_scm source service before version 0.12.4 could be used by attackers able to provide a _service file to execute code as the source service or the local user checking out the malicious services

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Opensuse
Products
Open Buildservice
CVE-2015-0796

open build service source server symlink exploitation via source patch

In open buildservice 2.6 before 2.6.3, 2.5 before 2.5.7 and 2.4 before 2.4.8 the source service patch application could generate non-standard files like symlinks or device nodes, which could allow buildservice users to break of confinement or cause denial of service attacks on the source service.

CVSS 3.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Opensuse
Products
Open Buildservice