Approved changes feed: RSS · Atom

cpe:2.3:o:suse:opensuse_factory:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductOpensuse Factory (e3a8b553-6912-5b52-8749-3eb4c3c542e5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-32000 vulnerable 2026-06-08 05:31:54.562979 clone-master-clean-up: dangerous file system operations
LOW (3.2)
A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions.
Published: 2021-07-28T09:35:11.535Z
Updated: 2024-09-16T17:48:09.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18898 not_vulnerable 2026-06-08 05:13:12.530692 trousers: Local privilege escalation from tss to root
HIGH (7.7)
UNIX Symbolic Link (Symlink) Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1. openSUSE Factory trousers versions prior to 0.3.14-7.1.
Published: 2020-01-23T14:05:14.446Z
Updated: 2024-09-16T18:24:53.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12476 not_vulnerable 2026-06-08 05:10:41.627924 obs-service-extract_file's outfilename parameter allows to write files outside of package directory
MEDIUM (4.3)
Relative Path Traversal vulnerability in obs-service-tar_scm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise Server 15 obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74:. openSUSE Factory obs-service-tar_scm versions prior to 0.9.2.1537788075.fefaa74.
Published: 2020-01-27T08:30:14.943Z
Updated: 2024-09-16T20:52:13.615Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.