LE
Product
Linux Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
476
CVEs
20
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 64Medium 60Low 4
Watch
Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3306 In wildKEV | 10.0 | May 18 | ProFTPD Improper Access Control Vulnerability Affected: 15; 15 |
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 10; 11; 11; 11; 12; 12 |
| CVE-2015-2590 In wildKEV | 9.8 | Jul 16 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 12 |
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10; 10; 11; 11; 11; 11; +1 more |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10; 10; 11; 11; 11; 11; +1 more |
| CVE-2013-2465 RansomwareIn wildKEV | 9.8 | Jun 18 | Oracle Java SE Unspecified Vulnerability Affected: 10; 10; 11; 11; 11; 11 |
| CVE-2012-0507 RansomwareIn wildKEV | 9.8 | Jun 7 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 10; 11; 11; 11 |
| CVE-2012-1823 In wildKEV | 9.8 | May 11 | PHP-CGI Query String Parameter Vulnerability Affected: 10; 11; 11 |
| CVE-2011-3544 In wildKEV | 9.8 | Oct 19 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 10 |
| CVE-2015-4495 In wildKEV | 8.8 | Aug 8 | Mozilla Firefox Security Feature Bypass Vulnerability Affected: 11; 11; 11; 11; 11; 12 |
| CVE-2013-1690 In wildKEV | 8.8 | Jun 26 | Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability Affected: 10; 11; 11; 11; 11; 11; +1 more |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 11; 11; 11; 12; 12; 12; +31 more |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 15; 15 |
| CVE-2014-3153 In wildKEV | 7.8 | Jun 7 | Linux Kernel Privilege Escalation Vulnerability Affected: 11; 11; 11; 11 |
| CVE-2010-3904 In wildKEV | 7.8 | Dec 6 | Linux Kernel Improper Input Validation Vulnerability Affected: 11 |
| CVE-2023-29552 In wildKEV | 7.5 | Apr 25 | Service Location Protocol (SLP) Denial-of-Service Vulnerability Affected: 11; 12; 12; 15; 15 |
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 10; 11; 11; 11; 11; 11; +1 more |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 11; 11; 11; 12; 12 |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 11; 11; 11; 12; 12 |
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: 10; 11; 11; 11; 11; 12; +1 more |
| CVE-2026-25702 | 9.8 | Mar 5 | A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be… Affected: 12 |
| CVE-2019-18903 | 9.8 | Mar 2 | A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or… Affected: 12; 15 |
| CVE-2019-18902 | 9.8 | Mar 2 | A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or… Affected: 12; 15 |
| CVE-2016-1000030 | 9.8 | Sep 5 | Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and… Affected: 11 |
| CVE-2017-18017 | 9.8 | Jan 3 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 11; 11; 12; 12; 12; 12; +2 more |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 11; 11; 12 |
| CVE-2014-9852 | 9.8 | Mar 17 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors Affected: 12 |
| CVE-2016-5772 | 9.8 | Aug 7 | Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote… Affected: 11 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: 12; 12.0 |
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: 11; 12; 12 |
| CVE-2015-8779 | 9.8 | Apr 19 | Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service… Affected: 11; 11; 11; 11; 12 |
| CVE-2015-8778 | 9.8 | Apr 19 | Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute… Affected: 11; 11; 11; 11; 12 |
| CVE-2014-9761 | 9.8 | Apr 19 | Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or… Affected: 11.0; 11.0; 11.0; 11.0; 12 |
| CVE-2016-2324 | 9.8 | Apr 8 | Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer… Affected: 12.0 |
| CVE-2016-2315 | 9.8 | Apr 8 | revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,… Affected: 12 |
| CVE-2015-0192 | 9.8 | Jul 2 | Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to… Affected: 10; 11; 11; 12 |
| CVE-2010-2941 | 9.8 | Nov 5 | ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of… Affected: 9 |
| CVE-2010-1205 | 9.8 | Jun 30 | Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: 9; 10; 11; 11 |
| CVE-2020-8025 | 9.3 | Aug 7 | A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux… Affected: 15; 15; 15 |
| CVE-2015-5041 | 9.1 | Jun 6 | The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive… Affected: 11; 11; 12 |
| CVE-2015-8776 | 9.1 | Apr 19 | The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain… Affected: 11; 11; 11; 11; 12 |
| CVE-2010-3782 | 8.8 | Jan 2 | obs-server before 1.7.7 allows logins by 'unconfirmed' accounts due to a bug in the REST api implementation Affected: 11 |
| CVE-2012-6639 | 8.8 | Nov 25 | An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data Affected: 11; 11 |
| CVE-2018-19540 | 8.8 | Nov 26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21,… Affected: 11; 11; 12; 12 |
| CVE-2018-19541 | 8.8 | Nov 26 | An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21,… Affected: 11; 11; 12; 12 |
| CVE-2010-2753 | 8.8 | Jul 30 | Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote… Affected: 11; 11 |
| CVE-2016-1286 | 8.6 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature… Affected: 11; 11; 11; 12; 12 |
| CVE-2018-16874 | 8.1 | Dec 14 | In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed with the import path of a malicious Go package which contains… Affected: 12 |
| CVE-2018-16873 | 8.1 | Dec 14 | In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go… Affected: 12 |
| CVE-2017-13082 | 8.1 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)… Affected: 11; 11; 12 |