Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse opensuse factory vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3
CVE-2022-45155
An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-servic...
Suse Opensuse Factory
7.8
CVSSv3
CVE-2022-31256
A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local malicious users to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail vers...
Opensuse Factory
4.4
CVSSv3
CVE-2021-46705
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local malicious users to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions before 2.06-150400.7.1. SUSE ope...
Gnu Grub2
7.8
CVSSv3
CVE-2021-45082
An issue exists in Cobbler prior to 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)
Cobbler Project CobblerSuse Linux Enterprise Server 11Opensuse Factory -Suse Linux Enterprise Server 12Suse Linux Enterprise Server 15Opensuse Backports Sle-15Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2021-41819
CGI::Cookie.parse in Ruby up to and including 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem up to and including 0.3.0 for Ruby.
Ruby-lang RubyRuby-lang Cgi 0.3.0Ruby-lang Cgi 0.2.0Ruby-lang Cgi 0.1.0Redhat Enterprise Linux 8.0Redhat Software Collections -Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Suse Linux Enterprise 12.0Suse Linux Enterprise 15.0Suse Linux Enterprise 11.0Opensuse Factory -Opensuse Leap 15.2Fedoraproject Fedora 34Fedoraproject Fedora 35
7.5
CVSSv3
CVE-2021-41817
Date.parse in the date gem up to and including 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.
Ruby-lang DateRuby-lang Date 3.2.0Ruby-lang RubyRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Redhat Software Collections -Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Suse Linux Enterprise 12.0Suse Linux Enterprise 15.0Opensuse Factory -Opensuse Leap 15.2
7.1
CVSSv3
CVE-2021-4166
vim is vulnerable to Out-of-bounds Read
Vim VimRedhat Enterprise Linux 8.0Suse Linux Enterprise 12.0Suse Linux Enterprise 15.0Opensuse Factory -Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 34Fedoraproject Fedora 35Apple Mac Os X 10.15.7Apple MacosApple Macos 10.15.7
7.1
CVSSv3
CVE-2021-32000
A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local malicious users to delete arbitrary files. This issue ...
Suse Opensuse Factory -Suse Linux Enterprise Server 12Suse Linux Enterprise Server 15
7.8
CVSSv3
CVE-2021-25321
A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escal...
Suse Arpwatch
3.3
CVSSv3
CVE-2021-25317
A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root wit...
Suse CupsFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook