Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
openSUSE

openSUSE Factory vulnerabilities

24 published CVEs name openSUSE Factory among the affected products.

Newest CVEs

  • CVE-2022-31253

    openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself

    openSUSE · Factory

    High7.1
  • CVE-2022-21946

    suddoers configuration for cscreen not restrictive enough

    openSUSE · Factory

    Medium5.3
  • CVE-2022-21945

    cscreen: usage of fixed path /tmp/cscreen.debug

    openSUSE · Factory

    Medium5.1
  • CVE-2022-21944

    watchman: chown in [email protected] unit allows symlink attack

    openSUSE · openSUSE Backports SLE-15-SP3

    High7.8
  • CVE-2021-36781

    parsec: dangerous 777 permissions for /run/parsec

    openSUSE · Factory

    Medium5.9
  • CVE-2021-32000

    clone-master-clean-up: dangerous file system operations

    SUSE · SUSE Linux Enterprise Server 12 SP3

    Low3.2
  • CVE-2021-25321

    arpwatch: Local privilege escalation from runtime user to root

    SUSE · SUSE Linux Enterprise Server 11-SP4-LTSS

    High7.8
  • CVE-2021-25322

    python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root

    openSUSE · Leap 15.2

    Medium6.8
  • CVE-2021-31997

    python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root

    openSUSE · Leap 15.2

    Medium6.8
  • CVE-2021-25317

    cups: ownership of /var/log/cups allows the lp user to create files as root

    SUSE · SUSE Linux Enterprise Server 11-SP4-LTSS

    Low3.3