LE
Product
Linux Enterprise Server
On CISA KEVExploited in the wildRansomware-linked
476
CVEs
20
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 30High 64Medium 60Low 4
Watch
Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-1502 | – | Mar 19 | The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the… Affected: 11; 11 |
| CVE-2014-1501 | – | Mar 19 | Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab"… Affected: 11; 11 |
| CVE-2014-1500 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Affected: 11; 11 |
| CVE-2014-1499 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering… Affected: 11; 11 |
| CVE-2014-1498 | – | Mar 19 | The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to… Affected: 11; 11 |
| CVE-2014-1494 | – | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory… Affected: 11; 11 |
| CVE-2014-2309 | – | Mar 11 | The ip6_route_add function in net/ipv6/route.c in the Linux kernel through 3.13.6 does not properly count the addition of routes, which allows remote attackers to cause a denial… Affected: 11; 11 |
| CVE-2014-1874 | – | Feb 28 | The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by… Affected: 10 |
| CVE-2014-0069 | – | Feb 28 | The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of… Affected: 11; 11; 11 |
| CVE-2014-1491 | – | Feb 6 | Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and… Affected: 11; 11 |
| CVE-2014-1490 | – | Feb 6 | Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3,… Affected: 11; 11 |
| CVE-2014-1489 | – | Feb 6 | Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of… Affected: 11; 11 |
| CVE-2014-1488 | – | Feb 6 | The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a… Affected: 11; 11 |
| CVE-2014-1485 | – | Feb 6 | The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of… Affected: 11; 11 |
| CVE-2014-1484 | – | Feb 6 | Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted… Affected: 11; 11 |
| CVE-2014-1483 | – | Feb 6 | Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in… Affected: 11; 11 |
| CVE-2014-1480 | – | Feb 6 | The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers… Affected: 11; 11 |
| CVE-2013-0339 | – | Jan 21 | libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function,… Affected: 10 |
| CVE-2013-4458 | – | Dec 12 | Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.18 and earlier allows remote attackers to cause a… Affected: 11 |
| CVE-2013-6672 | – | Dec 11 | Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations Affected: 11; 11 |
| CVE-2013-5619 | – | Dec 11 | Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a… Affected: 11; 11 |
| CVE-2013-5614 | – | Dec 11 | Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which… Affected: 11; 11 |
| CVE-2013-5612 | – | Dec 11 | Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by… Affected: 11; 11 |
| CVE-2013-5611 | – | Dec 11 | Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by… Affected: 11; 11 |
| CVE-2013-5610 | – | Dec 11 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory… Affected: 11; 11 |
| CVE-2013-4002 | – | Jul 23 | XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1… Affected: 9; 10; 10; 11; 11; 11; +1 more |
| CVE-2013-3812 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via… Affected: 11; 11 |
| CVE-2013-3809 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown… Affected: 11; 11 |
| CVE-2013-3808 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability… Affected: 11; 11 |
| CVE-2013-3805 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11; 11 |
| CVE-2013-3804 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect… Affected: 11; 11 |
| CVE-2013-3802 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect… Affected: 11; 11 |
| CVE-2013-3801 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11; 11 |
| CVE-2013-3794 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11; 11 |
| CVE-2013-3793 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via… Affected: 11; 11 |
| CVE-2013-3783 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11; 11 |
| CVE-2013-2147 | – | Jun 7 | The HP Smart Array controller disk-array driver and Compaq SMART2 controller disk-array driver in the Linux kernel through 3.9.4 do not initialize certain data structures, which… Affected: 10 |
| CVE-2013-2021 | – | May 13 | pdf.c in ClamAV 0.97.1 through 0.97.7 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted length value in an encrypted PDF file Affected: 11.0; 11.0 |
| CVE-2013-2020 | – | May 13 | Integer underflow in the cli_scanpe function in pe.c in ClamAV before 0.97.8 allows remote attackers to cause a denial of service (crash) via a skewed offset larger than the size… Affected: 11.0; 11.0 |
| CVE-2013-3301 | – | Apr 29 | The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified… Affected: 11; 11 |
| CVE-2013-0800 | – | Apr 3 | Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before… Affected: 10; 11; 11; 11; 11 |
| CVE-2013-1861 | – | Mar 28 | MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier… Affected: 11; 11 |
| CVE-2012-6075 | – | Feb 13 | Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote… Affected: 11 |
| CVE-2013-0170 | – | Feb 8 | Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6… Affected: 11 |
| CVE-2013-0771 | – | Jan 13 | Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10; 11; 11 |
| CVE-2013-0770 | – | Jan 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a… Affected: 10; 11; 11 |
| CVE-2013-0769 | – | Jan 13 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10; 11; 11 |
| CVE-2013-0768 | – | Jan 13 | Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before… Affected: 10; 11; 11 |
| CVE-2013-0767 | – | Jan 13 | The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird… Affected: 10; 11; 11 |
| CVE-2013-0766 | – | Jan 13 | Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before… Affected: 10; 11; 11 |