Vulnerabilities > Opensuse > OSC

DATE CVE VULNERABILITY TITLE RISK
2020-06-29 CVE-2019-3681 External Control of File Name or Path vulnerability in Opensuse OSC
A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files.
6.4
2014-02-06 CVE-2012-1095 Permissions, Privileges, and Access Controls vulnerability in Opensuse and OSC
osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build log or (2) build status that contains an escape sequence for a terminal emulator.
network
opensuse CWE-264
4.3