Factory

factory

Vendor: Opensuse • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-31256 1Opensuse 1Factory Jun 17, 2026 Oct 26, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue...Show more A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1.Show less
CVE-2022-31251 1Opensuse 1Factory Jun 17, 2026 Sep 7, 2022 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory...Show more A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.Show less
CVE-2021-45082 4Cobbler Project FedoraprojectOpensuse+1 more 5Backports CobblerFactory+2 more Jun 17, 2026 Feb 19, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginni...Show more An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)Show less
CVE-2021-36781 1Opensuse 1Factory Jun 17, 2026 Jan 14, 2022 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE...Show more A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1.Show less
CVE-2021-46142 4Debian FedoraprojectOpensuse+1 more 7Backports Debian LinuxExtra Packages For Enterprise Linux+4 more Jun 17, 2026 Jan 6, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
CVE-2021-46141 4Debian FedoraprojectOpensuse+1 more 7Backports Debian LinuxExtra Packages For Enterprise Linux+4 more Jun 17, 2026 Jan 6, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
CVE-2021-41819 6Debian FedoraprojectOpensuse+3 more 9Cgi Debian LinuxEnterprise Linux+6 more Jun 17, 2026 Jan 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41817 6Debian FedoraprojectOpensuse+3 more 9Date Debian LinuxEnterprise Linux+6 more Jun 17, 2026 Jan 1, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
CVE-2021-4166 7Apple DebianFedoraproject+4 more 8Debian Linux Enterprise LinuxFactory+5 more Jun 17, 2026 Dec 25, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 vim is vulnerable to Out-of-bounds Read
CVE-2021-25319 1Opensuse 1Factory Jun 17, 2026 May 5, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version...Show more A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions.Show less