Search Results (122 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2013-3703 1 Opensuse 1 Open Build Service 2024-11-21 N/A
The controller of the Open Build Service API prior to version 2.4.4 is missing a write permission check, allowing an authenticated attacker to add or remove user roles from packages and/or project meta data.
CVE-2012-5628 1 Gofer Project 1 Gofer 2024-11-21 N/A
gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries.