本頁列出影響 opensuse factory 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2022-31256 | A Improper Link Resolution Before File Access ('Link Following') vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1. | [email protected] | 7.7 | 0.23% | 2022-10-26 | 2024-11-21 |
| CVE-2022-31251 | A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3. | [email protected] | 6.5 | 0.20% | 2022-09-07 | 2024-11-21 |
| CVE-2021-45082 | An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.) | [email protected] | 7.8 | 0.50% | 2022-02-19 | 2024-11-21 |
| CVE-2021-36781 | A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1. | [email protected] | 5.9 | 0.21% | 2022-01-14 | 2024-11-21 |
| CVE-2021-46142 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax. | [email protected] | 5.5 | 1.09% | 2022-01-06 | 2024-11-21 |
| CVE-2021-46141 | An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner. | [email protected] | 5.5 | 1.13% | 2022-01-06 | 2024-11-21 |
| CVE-2021-41819 | CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby. | [email protected] | 7.5 | 2.93% | 2022-01-01 | 2025-05-22 |
| CVE-2021-41817 | Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1. | [email protected] | 7.5 | 3.22% | 2022-01-01 | 2024-11-21 |
| CVE-2021-4166 | vim is vulnerable to Out-of-bounds Read | [email protected] | 7.1 | 1.59% | 2021-12-25 | 2024-11-21 |
| CVE-2021-25319 | A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions. | [email protected] | 7.8 | 0.26% | 2021-05-05 | 2024-11-21 |