Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Factory — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Factory, with AI-generated Chinese analysis, references, and POCs.

Vendor: openSUSE

CVE IDTitleCVSSSeverityPaused
CVE-2022-31253 openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself CWE-426 7.1 High2022-11-09
CVE-2022-21946 suddoers configuration for cscreen not restrictive enough CWE-732 5.3 Medium2022-03-16
CVE-2022-21945 cscreen: usage of fixed path /tmp/cscreen.debug CWE-377 5.1 Medium2022-03-16
CVE-2021-36781 parsec: dangerous 777 permissions for /run/parsec CWE-276 5.9 Medium2022-01-14
CVE-2021-25319 virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group CWE-276 7.8 High2021-05-05
CVE-2020-8032 Local privilege escalation to root due to insecure tmp file usage CWE-377 6.7 Medium2021-02-25
CVE-2020-8015 Local privilege escalation in exim package from user mail to root CWE-59 8.4 High2020-04-02
CVE-2019-3700 yast: Fallback to DES without configuration in /etc/login.def CWE-327 2.9 Low2020-01-24
CVE-2019-3694 Local privilege escalation from munin to root in the packaging of munin CWE-59 7.7 High2020-01-24

All 9 known CVE vulnerabilities affecting Factory with full Chinese analysis, references, and POCs where available.