FA
Product
Factory
by openSUSE · last CVE Oct 26, 2022
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 4Low 1
Watch

Add Factory to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31256
7.8
0%
Oct 26
sendmail: mail to root privilege escalation via sm-client.pre script
Affected: before 8.17.1-1.1
CVE-2021-45082
7.8
0%
Feb 19
An issue was discovered in Cobbler before 3.3.1
Affected: All versions, or not specified
CVE-2021-25319
7.8
0%
May 5
A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root
Affected: through 6.1.20-1.1
CVE-2021-41819
7.5
3%
Jan 1
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names
Affected: All versions, or not specified
CVE-2021-41817
7.5
3%
Jan 1
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string
Affected: All versions, or not specified
CVE-2021-4166
7.1
2%
Dec 25
Out-of-bounds Read in vim/vim
Affected: All versions, or not specified
CVE-2022-31251
6.3
0%
Sep 7
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to…
Affected: before 22.05.2-3.3
CVE-2021-46142
5.5
1%
Jan 6
An issue was discovered in uriparser before 0.9.6
Affected: All versions, or not specified
CVE-2021-46141
5.5
1%
Jan 6
An issue was discovered in uriparser before 0.9.6
Affected: All versions, or not specified
CVE-2021-36781
4.4
0%
Jan 14
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an…
Affected: before 0.8.1-1.1
CVE-2021-25317
3.3
0%
May 5
cups: ownership of /var/log/cups allows the lp user to create files as root
Affected: cups through 2.3.3op2-2.1
Showing 11