Opensuse vulnerabilities
83 CVEs and advisories name Opensuse as an affected vendor, newest first. Follow it as a feed.
- CVE-2019-3700yast: Fallback to DES without configuration in /etc/login.def
- CVE-2019-3699Local privilege escalation from user privoxy to root
- CVE-2019-3697Local privilege escalation from user gnump3d to root
- CVE-2019-3694Local privilege escalation from munin to root in the packaging of munin
- CVE-2019-3693Local privilege escalation from user wwwrun to root in the packaging of mailman
- CVE-2019-3692Local privilege escalation from user news to root in the packaging of inn
- CVE-2019-3691Local privilege escalation from user munge to root
- CVE-2019-18899apt-cacher-ng insecure use of /run/apt-cacher-ng
- CVE-2019-18898trousers: Local privilege escalation from tss to root
- CVE-2018-12479Request controller allows to create requests with arbitrary request IDs
- CVE-2018-12478obs-service-replace_using_package_version allows to specify arbitrary input files
- CVE-2018-12477obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories
- CVE-2018-12474Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm
- CVE-2018-12473path traversal in obs-service-tar_scm
- CVE-2018-12467delete package via link exploit in open buildservice
- CVE-2018-12466openbuildservice allowed deleting packages via project links
- CVE-2014-0594CSRF protection incorrectly disabled
- CVE-2014-0593sed command injection
- CVE-2013-3703No write permission check in change_role command
- CVE-2018-7689Open Build Service arbitrary package modification
- CVE-2018-7688Open Build Service accepts arbitrary reviews
- CVE-2011-3178openbuildservice webui code injection
- CVE-2017-5188OBS worker VM escape via relative symbolic links