agentprime: opensuse-factoryEvery new CVE for opensuse-factory.https://agentprime.io/CVE-2024-22038: DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridgehttps://agentprime.io/advisories/CVE-2024-22038/https://agentprime.io/advisories/CVE-2024-22038/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Nov 2024 09:38:03 GMTCVECVE-2022-45155: obs-service-go_modules: arbitrary directory deletehttps://agentprime.io/advisories/CVE-2022-45155/https://agentprime.io/advisories/CVE-2022-45155/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Mar 2023 00:00:00 GMTCVECVE-2022-31253: openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itselfhttps://agentprime.io/advisories/CVE-2022-31253/https://agentprime.io/advisories/CVE-2022-31253/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Nov 2022 13:50:10 GMTCVECVE-2022-31256: sendmail: mail to root privilege escalation via sm-client.pre scripthttps://agentprime.io/advisories/CVE-2022-31256/https://agentprime.io/advisories/CVE-2022-31256/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Oct 2022 08:55:09 GMTCVECVE-2022-31251: slurm: %post for slurm-testsuite operates as root in user owned directoryhttps://agentprime.io/advisories/CVE-2022-31251/https://agentprime.io/advisories/CVE-2022-31251/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Sep 2022 08:55:09 GMTCVECVE-2022-21946: suddoers configuration for cscreen not restrictive enoughhttps://agentprime.io/advisories/CVE-2022-21946/https://agentprime.io/advisories/CVE-2022-21946/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Mar 2022 10:05:14 GMTCVECVE-2022-21945: cscreen: usage of fixed path /tmp/cscreen.debughttps://agentprime.io/advisories/CVE-2022-21945/https://agentprime.io/advisories/CVE-2022-21945/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Mar 2022 10:05:12 GMTCVECVE-2021-46705: grub2-once uses fixed file name in /var/tmphttps://agentprime.io/advisories/CVE-2021-46705/https://agentprime.io/advisories/CVE-2021-46705/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Mar 2022 09:50:10 GMTCVECVE-2022-21944: watchman: chown in watchman@.socket unit allows symlink attackhttps://agentprime.io/advisories/CVE-2022-21944/https://agentprime.io/advisories/CVE-2022-21944/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Jan 2022 09:10:09 GMTCVECVE-2021-36781: parsec: dangerous 777 permissions for /run/parsechttps://agentprime.io/advisories/CVE-2021-36781/https://agentprime.io/advisories/CVE-2021-36781/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 14 Jan 2022 10:40:09 GMTCVECVE-2021-32000: clone-master-clean-up: dangerous file system operationshttps://agentprime.io/advisories/CVE-2021-32000/https://agentprime.io/advisories/CVE-2021-32000/CVSS 3.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Jul 2021 09:35:11 GMTCVECVE-2021-25321: arpwatch: Local privilege escalation from runtime user to roothttps://agentprime.io/advisories/CVE-2021-25321/https://agentprime.io/advisories/CVE-2021-25321/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Jun 2021 08:25:12 GMTCVECVE-2021-25322: python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to roothttps://agentprime.io/advisories/CVE-2021-25322/https://agentprime.io/advisories/CVE-2021-25322/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jun 2021 11:45:11 GMTCVECVE-2021-31997: python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to roothttps://agentprime.io/advisories/CVE-2021-31997/https://agentprime.io/advisories/CVE-2021-31997/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jun 2021 11:35:11 GMTCVECVE-2021-25317: cups: ownership of /var/log/cups allows the lp user to create files as roothttps://agentprime.io/advisories/CVE-2021-25317/https://agentprime.io/advisories/CVE-2021-25317/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 May 2021 09:35:13 GMTCVECVE-2021-25319: virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers grouphttps://agentprime.io/advisories/CVE-2021-25319/https://agentprime.io/advisories/CVE-2021-25319/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 May 2021 08:25:13 GMTCVECVE-2020-8032: Local privilege escalation to root due to insecure tmp file usagehttps://agentprime.io/advisories/CVE-2020-8032/https://agentprime.io/advisories/CVE-2020-8032/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Feb 2021 09:15:17 GMTCVECVE-2019-3681: osc: stores downloaded (supposed) RPM in network-controlled filesystem pathshttps://agentprime.io/advisories/CVE-2019-3681/https://agentprime.io/advisories/CVE-2019-3681/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2020 12:00:16 GMTCVECVE-2020-8024: Problematic permissions in hylafax+ packaging allow escalation from uucp to other usershttps://agentprime.io/advisories/CVE-2020-8024/https://agentprime.io/advisories/CVE-2020-8024/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2020 07:45:17 GMTCVECVE-2020-8015: Local privilege escalation in exim package from user mail to roothttps://agentprime.io/advisories/CVE-2020-8015/https://agentprime.io/advisories/CVE-2020-8015/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2020 07:55:13 GMTCVECVE-2019-18903: wicked: Use-after-free when receiving invalid DHCP6 IA_PD optionhttps://agentprime.io/advisories/CVE-2019-18903/https://agentprime.io/advisories/CVE-2019-18903/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2020 16:45:18 GMTCVECVE-2019-18902: wicked: Use-after-free when receiving invalid DHCP6 client optionshttps://agentprime.io/advisories/CVE-2019-18902/https://agentprime.io/advisories/CVE-2019-18902/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2020 16:45:18 GMTCVECVE-2019-18897: Local privilege escalation from user salt to roothttps://agentprime.io/advisories/CVE-2019-18897/https://agentprime.io/advisories/CVE-2019-18897/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2020 15:20:27 GMTCVECVE-2019-3698: nagios cron job allows privilege escalation from user nagios to roothttps://agentprime.io/advisories/CVE-2019-3698/https://agentprime.io/advisories/CVE-2019-3698/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Feb 2020 13:20:14 GMTCVECVE-2018-12476: obs-service-extract_file's outfilename parameter allows to write files outside of package directoryhttps://agentprime.io/advisories/CVE-2018-12476/https://agentprime.io/advisories/CVE-2018-12476/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2020 08:30:14 GMTCVECVE-2019-3700: yast: Fallback to DES without configuration in /etc/login.defhttps://agentprime.io/advisories/CVE-2019-3700/https://agentprime.io/advisories/CVE-2019-3700/CVSS 2.9 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2020 12:45:14 GMTCVECVE-2019-3699: Local privilege escalation from user privoxy to roothttps://agentprime.io/advisories/CVE-2019-3699/https://agentprime.io/advisories/CVE-2019-3699/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2020 12:25:12 GMTCVECVE-2019-3694: Local privilege escalation from munin to root in the packaging of muninhttps://agentprime.io/advisories/CVE-2019-3694/https://agentprime.io/advisories/CVE-2019-3694/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2020 10:50:11 GMTCVECVE-2019-3692: Local privilege escalation from user news to root in the packaging of innhttps://agentprime.io/advisories/CVE-2019-3692/https://agentprime.io/advisories/CVE-2019-3692/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 24 Jan 2020 08:50:12 GMTCVECVE-2019-3691: Local privilege escalation from user munge to roothttps://agentprime.io/advisories/CVE-2019-3691/https://agentprime.io/advisories/CVE-2019-3691/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2020 16:00:20 GMTCVECVE-2019-18898: trousers: Local privilege escalation from tss to roothttps://agentprime.io/advisories/CVE-2019-18898/https://agentprime.io/advisories/CVE-2019-18898/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2020 14:05:14 GMTCVE