GCVE - cpe:2.3:a:suse:studio_onsite:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:suse:studio_onsite:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Suse (`ec535637-432e-5a38-96dd-4ec1e0138f73`)
Product	Studio Onsite (`ca68d44b-f5c8-51d1-8e22-659713b62c52`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4315`	vulnerable	2026-06-08 04:59:30.321046	Details available Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response. Published: 2011-12-08T20:00:00.000Z Updated: 2024-08-07T00:01:51.591Z Open on db.gcve.eu Reference links http://openwall.com/lists/oss-security/2011/11/17/10 http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070569.html http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00005.html http://www.nginx.org/en/CHANGES-1.0 http://trac.nginx.org/nginx/changeset/4268/nginx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4195`	vulnerable	2026-06-08 04:59:29.847136	Details available kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name. Published: 2014-04-16T18:00:00.000Z Updated: 2024-08-07T00:01:51.209Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/11/02/4 https://github.com/openSUSE/kiwi/commit/88bf491d16942766016c606e4210b4e072c1019f http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4193`	vulnerable	2026-06-08 04:59:29.835959	Details available Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, related to cloning. Published: 2014-04-16T18:00:00.000Z Updated: 2024-08-07T00:01:50.947Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4192`	vulnerable	2026-06-08 04:59:29.835560	Details available kiwi before 4.85.1, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands as demonstrated by "double quotes in kiwi_oemtitle of .profile." Published: 2014-04-16T18:00:00.000Z Updated: 2024-08-07T00:01:51.372Z Open on db.gcve.eu Reference links http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3180`	vulnerable	2026-06-08 04:58:10.933150	Details available kiwi before 4.98.08, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in the path of an overlay file, related to chown. Published: 2014-04-16T18:00:00.000Z Updated: 2024-08-06T23:22:27.700Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2011/11/02/4 https://github.com/openSUSE/kiwi/commit/f0f74b3f6ac6d47f7919aa9db380c0ad41ffe55f# http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00015.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.