SL
Product
Suse Linux
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Suse Linux to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-12084 | 9.8 | Jan 15 | Rsync: heap buffer overflow in rsync due to improper checksum length handling Affected: All versions, or not specified |
| CVE-2024-12088 | 7.5 | Jan 14 | Rsync: --safe-links option bypass leads to path traversal Affected: All versions, or not specified |
| CVE-2007-1285 | 7.5 | Mar 6 | The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays,… Affected: 10.0; 10.1 |
| CVE-2015-2567 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security :… Affected: 11.0; 11.0 |
| CVE-2015-2566 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 11.0; 11.0 |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: 11 |
| CVE-2011-0988 | – | Apr 18 | pure-ftpd 1.0.22, as used in SUSE Linux Enterprise Server 10 SP3 and SP4, and Enterprise Desktop 10 SP3 and SP4, when running OES Netware extensions, creates a world-writeable… Affected: 10; 10; 11; 11 |
| CVE-2010-3912 | – | Jan 12 | The supportconfig script in supportutils in SUSE Linux Enterprise 11 SP1 and 10 SP3 does not "disguise passwords" in configuration files, which has unknown impact and attack… Affected: 10; 11 |
| CVE-2010-3110 | – | Oct 12 | Multiple buffer overflows in the Novell Client novfs module for the Linux kernel in SUSE Linux Enterprise 11 SP1 and openSUSE 11.3 allow local users to gain privileges via… Affected: 11; 11 |
| CVE-2010-1507 | – | Sep 3 | WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote… Affected: 11 |
| CVE-2009-1297 | – | Oct 23 | iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite… Affected: 10; 11 |
| CVE-2007-4432 | – | Aug 20 | Untrusted search path vulnerability in the wrapper scripts for the (1) rug, (2) zen-updater, (3) zen-installer, and (4) zen-remover programs on SUSE Linux 10.1 and Enterprise 10… Affected: 10.1 |
| CVE-2007-4394 | – | Aug 17 | Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Server 9 and 10 before 20070810 allows… Affected: 10.0; 10.1 |
| CVE-2006-0803 | – | Feb 23 | The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents… Affected: 10.0 |
| CVE-2005-4791 | – | Dec 31 | Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY_PATH, which might allow local users to execute arbitrary… Affected: 10.0 |
| CVE-2005-4790 | – | Dec 31 | Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the working directory to be added to LD_LIBRARY_PATH, which… Affected: 10.0 |
| CVE-2005-3321 | – | Oct 27 | chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link… Affected: 10.0 |
Showing 17
