- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/13/2026, Factory recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Factory and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2022-31253openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itselfCVE-2022-21946suddoers configuration for cscreen not restrictive enoughCVE-2022-21945cscreen: usage of fixed path /tmp/cscreen.debugCVE-2022-21944watchman: chown in watchman@.socket unit allows symlink attackCVE-2021-36781parsec: dangerous 777 permissions for /run/parsec| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2022-31253openldap2: /usr/lib/openldap/start allows ldap user/group to recursively chown arbitrary directory trees to itself | Exploitation statusActively exploited | FixYes |
| SeverityHigh |
CVE-2022-21946suddoers configuration for cscreen not restrictive enough | Exploitation statusNot confirmed | FixNo | Published03/16/2022 | SeverityMedium |
|---|
CVE-2022-21945cscreen: usage of fixed path /tmp/cscreen.debug | Exploitation statusNot confirmed | FixNo | Published03/16/2022 | SeverityMedium |
|---|
CVE-2022-21944watchman: chown in watchman@.socket unit allows symlink attack | Exploitation statusNot confirmed | FixYes | Published01/26/2022 | SeverityHigh |
|---|
CVE-2021-36781parsec: dangerous 777 permissions for /run/parsec | Exploitation statusNot confirmed | FixYes | Published01/14/2022 | SeverityMedium |
|---|
CVE-2021-32000clone-master-clean-up: dangerous file system operations | Exploitation statusNot confirmed | FixNo | Published07/28/2021 | SeverityLow |
|---|
CVE-2021-25321arpwatch: Local privilege escalation from runtime user to root | Exploitation statusNot confirmed | FixYes | Published06/30/2021 | SeverityHigh |
|---|
CVE-2021-31997python-postorius: postorius-permissions.sh used during %post allows local privilege escalation from postorius user to root | Exploitation statusNot confirmed | FixNo | Published06/10/2021 | SeverityMedium |
|---|
CVE-2021-25322python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root | Exploitation statusNot confirmed | FixYes | Published06/10/2021 | SeverityMedium |
|---|
CVE-2021-25319virtualbox: missing sticky bit for /etc/vbox allows local root exploit for members of vboxusers group | Exploitation statusNot confirmed | FixNo | Published05/05/2021 | SeverityHigh |
|---|
CVE-2021-25317cups: ownership of /var/log/cups allows the lp user to create files as root | Exploitation statusNot exploited | FixYes | Published05/05/2021 | SeverityLow |
|---|
CVE-2020-8032Local privilege escalation to root due to insecure tmp file usage | Exploitation statusNot confirmed | FixNo | Published02/25/2021 | SeverityMedium |
|---|
CVE-2020-8015Local privilege escalation in exim package from user mail to root | Exploitation statusNot confirmed | FixYes | Published04/02/2020 | SeverityHigh |
|---|
CVE-2019-18903wicked: Use-after-free when receiving invalid DHCP6 IA_PD option | Exploitation statusNot confirmed | FixYes | Published03/02/2020 | SeverityHigh |
|---|
CVE-2019-18902wicked: Use-after-free when receiving invalid DHCP6 client options | Exploitation statusNot confirmed | FixYes | Published03/02/2020 | SeverityHigh |
|---|
CVE-2019-18897Local privilege escalation from user salt to root | Exploitation statusNot confirmed | FixNo | Published03/02/2020 | SeverityHigh |
|---|
CVE-2019-3698nagios cron job allows privilege escalation from user nagios to root | Exploitation statusNot confirmed | FixNo | Published02/28/2020 | SeverityMedium |
|---|
CVE-2018-12476obs-service-extract_file's outfilename parameter allows to write files outside of package directory | Exploitation statusNot confirmed | FixYes | Published01/27/2020 | SeverityMedium |
|---|
CVE-2019-3700yast: Fallback to DES without configuration in /etc/login.def | Exploitation statusNot confirmed | FixYes | Published01/24/2020 | SeverityLow |
|---|
CVE-2019-3699Local privilege escalation from user privoxy to root | Exploitation statusNot confirmed | FixNo | Published01/24/2020 | SeverityHigh |
|---|
CVE-2019-3694Local privilege escalation from munin to root in the packaging of munin | Exploitation statusNot confirmed | FixNo | Published01/24/2020 | SeverityHigh |
|---|
CVE-2019-3692Local privilege escalation from user news to root in the packaging of inn | Exploitation statusNot confirmed | FixNo | Published01/24/2020 | SeverityHigh |
|---|
CVE-2019-3691Local privilege escalation from user munge to root | Exploitation statusNot confirmed | FixYes | Published01/23/2020 | SeverityHigh |
|---|
CVE-2019-18898trousers: Local privilege escalation from tss to root | Exploitation statusNot confirmed | FixYes | Published01/23/2020 | SeverityHigh |
|---|
24 Results | Page 1 of 1