Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Factory Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2022-31253`openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself	Exploitation statusPublic exploit	FixYes	Published11/09/2022	SeverityHigh
`CVE-2022-31256`sendmail: mail to root privilege escalation via sm-client.pre script	Exploitation statusNot known exploited	FixYes	Published10/26/2022	SeverityHigh
`CVE-2022-31251`slurm: %post for slurm-testsuite operates as root in user owned directory	Exploitation statusNot confirmed	FixYes	Published09/07/2022	SeverityMedium
`CVE-2022-21946`suddoers configuration for cscreen not restrictive enough	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2022	SeverityMedium
`CVE-2022-21945`cscreen: usage of fixed path /tmp/cscreen.debug	Exploitation statusNot confirmed	FixNot confirmed	Published03/16/2022	SeverityMedium
`CVE-2021-45082`CVE-2021-45082	Exploitation statusNot confirmed	FixNot confirmed	Published02/18/2022	SeverityUnknown
`CVE-2022-21944`watchman: chown in watchman@.socket unit allows symlink attack	Exploitation statusNot confirmed	FixYes	Published01/26/2022	SeverityHigh
`CVE-2021-36781`parsec: dangerous 777 permissions for /run/parsec	Exploitation statusNot confirmed	FixYes	Published01/14/2022	SeverityMedium
`CVE-2021-46141`CVE-2021-46141	Exploitation statusNot confirmed	FixNot confirmed	Published01/06/2022	SeverityUnknown
`CVE-2021-46142`CVE-2021-46142	Exploitation statusNot confirmed	FixNot confirmed	Published01/06/2022	SeverityUnknown
`CVE-2021-41819`CVE-2021-41819	Exploitation statusNot known exploited	FixNot confirmed	Published01/01/2022	SeverityHigh
`CVE-2021-41817`CVE-2021-41817	Exploitation statusNot confirmed	FixNot confirmed	Published01/01/2022	SeverityUnknown
`CVE-2021-4166`Out-of-bounds Read in vim/vim	Exploitation statusNot confirmed	FixYes	Published12/25/2021	SeverityHigh
`CVE-2021-32000`clone-master-clean-up: dangerous file system operations	Exploitation statusNot confirmed	FixNot confirmed	Published07/28/2021	SeverityLow
`CVE-2021-25321`arpwatch: Local privilege escalation from runtime user to root	Exploitation statusNot confirmed	FixYes	Published06/30/2021	SeverityHigh
`CVE-2021-25322`python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root	Exploitation statusNot confirmed	FixYes	Published06/10/2021	SeverityMedium
`CVE-2021-31997`python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root	Exploitation statusNot confirmed	FixNot confirmed	Published06/10/2021	SeverityMedium
`CVE-2021-25317`cups: ownership of /var/log/cups allows the lp user to create files as root	Exploitation statusNot confirmed	FixYes	Published05/05/2021	SeverityLow
`CVE-2021-25319`virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group	Exploitation statusNot confirmed	FixNot confirmed	Published05/05/2021	SeverityHigh
`CVE-2020-8032`Local privilege escalation to root due to insecure tmp file usage	Exploitation statusNot confirmed	FixNot confirmed	Published02/25/2021	SeverityMedium
`CVE-2020-8015`Local privilege escalation in exim package from user mail to root	Exploitation statusNot confirmed	FixYes	Published04/02/2020	SeverityHigh
`CVE-2019-18903`wicked: Use-after-free when receiving invalid DHCP6 IA_PD option	Exploitation statusNot confirmed	FixYes	Published03/02/2020	SeverityHigh
`CVE-2019-18902`wicked: Use-after-free when receiving invalid DHCP6 client options	Exploitation statusNot confirmed	FixYes	Published03/02/2020	SeverityHigh
`CVE-2019-18897`Local privilege escalation from user salt to root	Exploitation statusNot confirmed	FixNot confirmed	Published03/02/2020	SeverityHigh
`CVE-2019-3698`nagios cron job allows privilege escalation from user nagios to root	Exploitation statusNot confirmed	FixNot confirmed	Published02/28/2020	SeverityMedium
`CVE-2018-12476`obs-service-extract_file's outfilename parameter allows to write files outside of package directory	Exploitation statusNot confirmed	FixYes	Published01/27/2020	SeverityMedium
`CVE-2019-3700`yast: Fallback to DES without configuration in /etc/login.def	Exploitation statusNot confirmed	FixYes	Published01/24/2020	SeverityLow
`CVE-2019-3699`Local privilege escalation from user privoxy to root	Exploitation statusNot confirmed	FixNot confirmed	Published01/24/2020	SeverityHigh
`CVE-2019-3694`Local privilege escalation from munin to root in the packaging of munin	Exploitation statusNot confirmed	FixNot confirmed	Published01/24/2020	SeverityHigh
`CVE-2019-3692`Local privilege escalation from user news to root in the packaging of inn	Exploitation statusNot confirmed	FixNot confirmed	Published01/24/2020	SeverityHigh
`CVE-2019-3691`Local privilege escalation from user munge to root	Exploitation statusNot confirmed	FixYes	Published01/23/2020	SeverityHigh
`CVE-2019-18898`trousers: Local privilege escalation from tss to root	Exploitation statusNot confirmed	FixYes	Published01/23/2020	SeverityHigh

32 / 32 Results

All vulnerabilities loaded

Security vulnerabilities in Factory

Factory

Verify to analyze this security profile

How many security vulnerabilities does Factory currently have?

Does the latest version of Factory have any known vulnerabilities?

Run an in-depth assessment with complete web risk management