TI-2021-18444 CVE-2021-41819 · GHSA-4vf4-qmvg-mh7h
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names.
Priority LOW 39
CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names.
openSUSE
Records3295All Threatist records
Exploited (KEV)61In CISA KEV
CVSS critical454CVSS 9.0–10.0
CVSS high1241CVSS 7.0–8.9
Exploited now
openSUSE records in CISA KEVTI-2015-02923 ProFTPD Improper Access Control Vulnerability TI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2015-02874 Red Hat Libuser Race Condition Vulnerability TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability TI-2025-23530 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability TI-2019-03828 Rails Ruby on Rails Path Traversal Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
10 records in Factory · all components
TI-2021-18443 CVE-2021-41817 · GHSA-qg54-694p-wgpp
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial…
Priority LOW 39
Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.
TI-2022-13289 CVE-2022-31256 · GHSA-cfgc-fgg8-p3qf
sendmail: mail to root privilege escalation via sm-client.pre script
Priority LOW 36
A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root.
TI-2021-20416 CVE-2021-45082 · GHSA-6cm4-gm85-972c
An issue was discovered in Cobbler before 3.3.1.
Priority LOW 35
An issue was discovered in Cobbler before 3.3.1.
TI-2021-03035 CVE-2021-4166 · GHSA-5q95-22v3-59qw
Out-of-bounds Read in vim/vim
Priority LOW 35
vim is vulnerable to Out-of-bounds Read
TI-2021-07558 CVE-2021-25319 · GHSA-x9mv-6frm-qg9c
virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group
Priority LOW 34
A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root.
TI-2022-13284 CVE-2022-31251 · GHSA-rw8f-7p48-8m3h
slurm: %post for slurm-testsuite operates as root in user owned directory
Priority LOW 28
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root.
TI-2021-21075 CVE-2021-46142 · GHSA-5jh9-cx9r-v7ww
An issue was discovered in uriparser before 0.9.6.
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
TI-2021-21074 CVE-2021-46141 · GHSA-h7v5-6w5c-368p
An issue was discovered in uriparser before 0.9.6.
Priority LOW 27
An issue was discovered in uriparser before 0.9.6.
TI-2021-14902 CVE-2021-36781 · GHSA-m398-vv9j-2r7f
parsec: dangerous 777 permissions for /run/parsec
Priority LOW 26
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service.