Factory (Opensuse) - vulnerabilities (CVEs)

24 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-11-09. Vendor: Opensuse.

CVEs of Factory

CVE-2022-31253 - CVSS 7.8 (high), 2022-11-09: A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of…
CVE-2022-31256 - CVSS 7.8 (high), 2022-10-26: A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows…
CVE-2022-31251 - CVSS 6.5 (medium), 2022-09-07: A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm…
CVE-2022-21946 - CVSS 5.3 (medium), 2022-03-16: A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to…
CVE-2022-21945 - CVSS 6.1 (medium), 2022-03-16: A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default…
CVE-2021-45082 - CVSS 7.8 (high), 2022-02-19: An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python…
CVE-2022-21944 - CVSS 7.8 (high), 2022-01-26: A UNIX Symbolic Link (Symlink) Following vulnerability in the systemd service file for watchman of openSUSE Backports SLE-15-SP3, Factory allows local…
CVE-2021-36781 - CVSS 5.9 (medium), 2022-01-14: A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or…
CVE-2021-46142 - CVSS 5.5 (medium), 2022-01-06: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
CVE-2021-46141 - CVSS 5.5 (medium), 2022-01-06: An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
CVE-2021-41819 - CVSS 7.5 (high), 2022-01-01: CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41817 - CVSS 7.5 (high), 2022-01-01: Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2,…
CVE-2021-4166 - CVSS 7.1 (high), 2021-12-25: vim is vulnerable to Out-of-bounds Read
CVE-2021-32000 - CVSS 7.1 (high), 2021-07-28: A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3,…
CVE-2021-25321 - CVSS 7.8 (high), 2021-06-30: A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud…
CVE-2021-31997 - CVSS 7.8 (high), 2021-06-10: A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users…
CVE-2021-25322 - CVSS 7.8 (high), 2021-06-10: A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from…
CVE-2021-25317 - CVSS 3.3 (low), 2021-05-05: A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack…
CVE-2021-25319 - CVSS 7.8 (high), 2021-05-05: A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to…
CVE-2020-8032 - CVSS 7 (high), 2021-02-25: A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects:…
CVE-2020-8015 - CVSS 8.4 (high), 2020-04-02: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root.…
CVE-2019-18903 - CVSS 9.8 (critical), 2020-03-02: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote…
CVE-2019-18902 - CVSS 9.8 (critical), 2020-03-02: A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote…
CVE-2019-18897 - CVSS 8.4 (high), 2020-03-02: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of salt of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE…
CVE-2019-3698 - CVSS 7 (high), 2020-02-28: UNIX Symbolic Link (Symlink) Following vulnerability in the cronjob shipped with nagios of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 11;…
CVE-2018-12476 - CVSS 7.5 (high), 2020-01-27: Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a…
CVE-2019-3700 - CVSS 3.3 (low), 2020-01-24: yast2-security didn't use secure defaults to protect passwords. This became a problem on 2019-10-07 when configuration files that set secure settings were…
CVE-2019-3699 - CVSS 7.8 (high), 2020-01-24: UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user…
CVE-2019-3694 - CVSS 7.8 (high), 2020-01-24: A Symbolic Link (Symlink) Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin…
CVE-2019-3692 - CVSS 7.8 (high), 2020-01-24: The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink…
CVE-2019-3691 - CVSS 7.8 (high), 2020-01-23: A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to…
CVE-2019-18898 - CVSS 7.8 (high), 2020-01-23: UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers…