Show filters
3,830 Total Results
Displaying 131-140 of 3,830
Sort by:
Attacker Value
Unknown

CVE-2022-31251

Disclosure Date: August 02, 2022 (last updated February 24, 2025)
A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
Attacker Value
Unknown

CVE-2022-31250

Disclosure Date: June 24, 2022 (last updated February 24, 2025)
A UNIX Symbolic Link (Symlink) Following vulnerability in keylime of openSUSE Tumbleweed allows local attackers to escalate from the keylime user to root. This issue affects: openSUSE Tumbleweed keylime versions prior to 6.4.2-1.1.
Attacker Value
Unknown

CVE-2022-31248

Disclosure Date: June 20, 2022 (last updated February 23, 2025)
A Observable Response Discrepancy vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to discover valid usernames. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46-1. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37-1.
Attacker Value
Unknown

CVE-2022-21952

Disclosure Date: June 20, 2022 (last updated February 23, 2025)
A Missing Authentication for Critical Function vulnerability in spacewalk-java of SUSE Manager Server 4.1, SUSE Manager Server 4.2 allows remote attackers to easily exhaust available disk resources leading to DoS. This issue affects: SUSE Manager Server 4.1 spacewalk-java versions prior to 4.1.46. SUSE Manager Server 4.2 spacewalk-java versions prior to 4.2.37.
Attacker Value
Unknown

CVE-2022-21951

Disclosure Date: May 25, 2022 (last updated February 23, 2025)
A Cleartext Transmission of Sensitive Information vulnerability in SUSE Rancher, Rancher allows attackers on the network to read and change network data due to missing encryption of data transmitted via the network when a cluster is created from an RKE template with the CNI value overridden This issue affects: SUSE Rancher Rancher versions prior to 2.5.14; Rancher versions prior to 2.6.5.
Attacker Value
Unknown

CVE-2022-27239

Disclosure Date: April 27, 2022 (last updated February 23, 2025)
In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
Attacker Value
Unknown

CVE-2022-21949

Disclosure Date: April 20, 2022 (last updated February 23, 2025)
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations. This can be used to gain information from the server that can be abused to escalate to Admin privileges on OBS. This issue affects: SUSE Open Build Service Open Build Service versions prior to 2.10.13.
Attacker Value
Unknown

CVE-2021-36784

Disclosure Date: April 15, 2022 (last updated February 23, 2025)
A Improper Privilege Management vulnerability in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.
Attacker Value
Unknown

CVE-2021-4200

Disclosure Date: April 15, 2022 (last updated February 23, 2025)
A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.
Attacker Value
Unknown

CVE-2021-36778

Disclosure Date: April 15, 2022 (last updated February 23, 2025)
A Incorrect Authorization vulnerability in SUSE Rancher allows administrators of third-party repositories to gather credentials that are sent to their servers. This issue affects: SUSE Rancher Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.