| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2018-7814 | Schneider Electric Eurotherm by Schneider Electric GUIcon 缓冲区错误漏洞 | Schneider Electric SE | Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) | 高危 | - | 2019-02-06 23:00:00 | Deep Dive |
| CVE-2018-7815 | Schneider Electric Eurotherm by Schneider Electric GUIcon 安全漏洞 | Schneider Electric SE | Eurotherm by Schneider Electric GUIcon V2.0 (Gold Build 683.0) | 高危 | - | 2019-02-06 23:00:00 | Deep Dive |
| CVE-2018-12474 | Crafted service parameters allows to induce unexpected behaviour in obs-service-tar_scm | openSUSE | Open Build Service | 超危 | - | 2018-10-09 13:00:00 | Deep Dive |
| CVE-2018-12477 | obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories | openSUSE | Open Build Service | 高危 | - | 2018-10-09 13:00:00 | Deep Dive |
| CVE-2018-12478 | obs-service-replace_using_package_version allows to specify arbitrary input files | openSUSE | Open Build Service | 中危 | - | 2018-10-09 13:00:00 | Deep Dive |
| CVE-2018-12479 | Request controller allows to create requests with arbitrary request IDs | openSUSE | Open Build Service | 高危 | - | 2018-10-09 13:00:00 | Deep Dive |
| CVE-2018-12473 | path traversal in obs-service-tar_scm | openSUSE | Open Build Service | 高危 | - | 2018-10-02 15:00:00 | Deep Dive |
| CVE-2011-4183 | open build service allows anyone to upload rpms | SUSE | open build service | 超危 | - | 2018-06-13 13:00:00 | Deep Dive |
| CVE-2011-4181 | open build service information leak via unauthorized source access | SUSE | open build service | 高危 | - | 2018-06-11 15:00:00 | Deep Dive |
| CVE-2013-3703 | No write permission check in change_role command | openSUSE | Open Build Service | 中危 | - | 2018-06-08 17:00:00 | Deep Dive |
| CVE-2014-0594 | CSRF protection incorrectly disabled | openSUSE | Open Build Service | 高危 | - | 2018-06-08 17:00:00 | Deep Dive |
| CVE-2018-7688 | Open Build Service accepts arbitrary reviews | openSUSE | Open Build Service | 中危 | - | 2018-06-07 13:00:00 | Deep Dive |
| CVE-2018-7689 | Open Build Service arbitrary package modification | openSUSE | Open Build Service | 中危 | - | 2018-06-07 13:00:00 | Deep Dive |
| CVE-2017-16003 | windows-build-tools 安全漏洞 | HackerOne | windows-build-tools node module | 高危 | - | 2018-05-29 20:00:00 | Deep Dive |
| CVE-2015-0796 | open build service source server symlink exploitation via source patch | SUSE | open build service | 高危 | - | 2018-03-02 20:00:00 | Deep Dive |
| CVE-2017-14804 | package builds could use directory traversal to write outside of target area | SUSE | build | 中危 | - | 2018-03-01 19:00:00 | Deep Dive |
| CVE-2017-5188 | OBS worker VM escape via relative symbolic links | openSUSE | open build service | 高危 | - | 2018-03-01 19:00:00 | Deep Dive |
| CVE-2017-9268 | open-build-service retrigger / wipebinaries hitting the wrong project bypassing access permissions | SUSE | open build service | 中危 | - | 2018-03-01 19:00:00 | Deep Dive |
| CVE-2017-14377 | EMC RSA Authentication Agent for Web for Apache Web Server 安全漏洞 | - | RSA Authentication Agent for Web for Apache Web Server RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prior to Build 618 | 超危 | - | 2017-11-29 18:00:00 | Deep Dive |
| CVE-2017-6657 | Cisco Sourcefire Snort 安全漏洞 | - | Snort 3.0 All versions prior to build 233. | 高危 | - | 2017-05-16 17:00:00 | Deep Dive |