[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fl6PpZrVujG4u7k_NoBYpBxvxQ6vO_mXAIn5_LDEh1lg":3,"g5a-ex:opensuse\u002Ffactory@*":97,"g5a-family:opensuse\u002Ffactory":99},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":74,"seoMetadata":75,"meta":94},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"opensuse","factory",0,23,"2022-10-26",[],"Factory by Opensuse is a technology product and 23 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,29,35,42,49,53,59,64,69],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2021-41817","Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2, 3.0.2, and 2.0.1.","2022-01-01",7.5,"v3.1","High",false,0.03222,{"cveId":26,"description":27,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":28},"CVE-2021-41819","CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.",0.02931,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":34},"CVE-2021-4166","vim is vulnerable to Out-of-bounds Read","2021-12-25",7.1,0.01578,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":21,"severity":40,"isKev":23,"epssScore":41},"CVE-2019-3681","A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .","2020-06-29",9.8,"Critical",0.01385,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":47,"isKev":23,"epssScore":48},"CVE-2021-46141","An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.","2022-01-06",5.5,"Medium",0.01126,{"cveId":50,"description":51,"publishedDate":45,"cvssScore":46,"cvssVersion":21,"severity":47,"isKev":23,"epssScore":52},"CVE-2021-46142","An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.",0.0109,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":58},"CVE-2019-3691","A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.","2020-01-23",7.8,0.00519,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":63},"CVE-2019-3692","The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version 2.6.2-2.2 and prior versions. openSUSE Leap 15.1 inn version 2.5.4-lp151.2.47 and prior versions.","2020-01-24",0.005,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":68},"CVE-2021-45082","An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the \"#from MODULE import\" substring. (Only lines beginning with #import are blocked.)","2022-02-19",0.00495,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":57,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":73},"CVE-2021-25321","A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.","2021-06-30",0.00441,[],{"title":76,"metaDescription":77,"keywords":78,"structuredData":79},"Factory by Opensuse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Factory by Opensuse with 23 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Factory vulnerabilities, Factory security, Factory CVE, Opensuse Factory, Factory threat intelligence, Opensuse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":80,"@type":81,"name":82,"description":77,"url":83,"manufacturer":84,"applicationCategory":88,"softwareVersion":89,"mainEntity":90},"https:\u002F\u002Fschema.org","SoftwareApplication","Factory","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopensuse\u002Ffactory",{"@type":85,"name":86,"url":87},"Organization","Opensuse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopensuse","Security Software","Multiple versions",{"@type":91,"name":92,"description":93,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Factory Security Vulnerabilities","Security vulnerabilities affecting Factory by Opensuse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":95,"apiVersion":96},"2026-10-17T17:00:20.462Z","3.0",{"rows":98,"total":9,"capped":23,"failed":9},[],[100],{"product":101,"cves":102},"factory_watchman",1]