Linux Enterprise Server vulnerabilities | LiveThreat CVE Feed

Product

Linux Enterprise Server

by Suse · last CVE Apr 22, 2026

On CISA KEVExploited in the wildRansomware-linked

476

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities476 In the news12 Timeline

Severity mix

Critical 30High 64Medium 60Low 4

Severity

All severities476 Critical30 High64 Medium60 Low4

Exploitation

On CISA KEV20 Exploited in the wild20

Watch

Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2012-4188	–	15%	Oct 10	Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,… Affected: 10; 11; 11
CVE-2012-4187	–	7%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a… Affected: 10; 11; 11
CVE-2012-4186	–	15%	Oct 10	Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR… Affected: 10; 11; 11
CVE-2012-4185	–	9%	Oct 10	Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,… Affected: 10; 11; 11
CVE-2012-4184	–	2%	Oct 10	The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and… Affected: 10; 11; 11
CVE-2012-4183	–	5%	Oct 10	Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird… Affected: 11; 11
CVE-2012-4182	–	5%	Oct 10	Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR… Affected: 10; 11; 11
CVE-2012-4180	–	9%	Oct 10	Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0,… Affected: 10; 11; 11
CVE-2012-4179	–	5%	Oct 10	Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyTxn function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0,… Affected: 10; 11; 11
CVE-2012-3995	–	5%	Oct 10	The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey… Affected: 10; 11; 11
CVE-2012-3994	–	2%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allow remote attackers to… Affected: 10; 11; 11
CVE-2012-3992	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage history… Affected: 10; 11; 11
CVE-2012-3991	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict JSAPI… Affected: 10; 11; 11
CVE-2012-3990	–	5%	Oct 10	Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x… Affected: 10; 11; 11
CVE-2012-3989	–	3%	Oct 10	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly perform a cast of an unspecified variable during use of the instanceof operator on… Affected: 10; 11; 11
CVE-2012-3988	–	5%	Oct 10	Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13… Affected: 10; 11; 11
CVE-2012-3986	–	3%	Oct 10	Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly restrict calls… Affected: 10; 11; 11
CVE-2012-3985	–	2%	Oct 10	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly implement the HTML5 Same Origin Policy, which allows remote attackers to conduct… Affected: 10; 11; 11
CVE-2012-3984	–	2%	Oct 10	Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 do not properly handle navigation away from a web page that has a SELECT element's menu active,… Affected: 10; 11; 11
CVE-2012-3983	–	5%	Oct 10	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey before 2.13 allow remote attackers to cause a… Affected: 10; 11; 11
CVE-2012-3982	–	5%	Oct 10	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before… Affected: 10; 11; 11
CVE-2012-3976	–	2%	Aug 29	Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly handle onLocationChange events during navigation between different https… Affected: 10; 11; 11
CVE-2012-3972	–	4%	Aug 29	The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10; 11; 11
CVE-2012-3968	–	6%	Aug 29	Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10; 11; 11
CVE-2012-3967	–	4%	Aug 29	The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on… Affected: 10; 11; 11
CVE-2012-3963	–	6%	Aug 29	Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR… Affected: 10; 11; 11
CVE-2012-3961	–	7%	Aug 29	Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10; 11; 11
CVE-2012-3960	–	5%	Aug 29	Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10; 11; 11
CVE-2012-3959	–	5%	Aug 29	Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird… Affected: 10; 11; 11
CVE-2012-3957	–	8%	Aug 29	Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR… Affected: 10; 11; 11
CVE-2012-3956	–	5%	Aug 29	Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10; 11; 11
CVE-2012-1976	–	6%	Aug 29	Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10; 11; 11
CVE-2012-1975	–	6%	Aug 29	Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x… Affected: 10; 11; 11
CVE-2012-1974	–	6%	Aug 29	Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird… Affected: 10; 11; 11
CVE-2012-1973	–	6%	Aug 29	Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10; 11; 11
CVE-2012-1972	–	6%	Aug 29	Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0,… Affected: 10; 11; 11
CVE-2012-1970	–	6%	Aug 29	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before… Affected: 10; 11; 11
CVE-2012-3867	–	2%	Aug 6	lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the… Affected: 11; 11; 11
CVE-2011-4127	–	1%	Jul 3	The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a… Affected: 10
CVE-2012-1717	–	0%	Jun 16	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37… Affected: 10; 11; 11
CVE-2012-1938	–	5%	Jun 5	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 13.0, Thunderbird before 13.0, and SeaMonkey before 2.10 allow remote attackers to cause a… Affected: 10; 11; 11
CVE-2011-3026	–	73%	Feb 16	Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown… Affected: 11
CVE-2011-3970	–	2%	Feb 9	libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors Affected: 10; 11; 11; 11; 11
CVE-2012-0449	–	6%	Feb 1	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service… Affected: 10; 11; 11
CVE-2012-0444	–	8%	Feb 1	Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures,… Affected: 10; 11; 11
CVE-2012-0442	–	5%	Feb 1	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey… Affected: 10; 11; 11
CVE-2011-3659	–	37%	Feb 1	Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote… Affected: 10; 11; 11
CVE-2012-0053	–	82%	Jan 28	protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows… Affected: 10
CVE-2011-4132	–	0%	Jan 27	The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and… Affected: 10
CVE-2012-0031	–	3%	Jan 18	scoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a denial of service (daemon crash during shutdown) or possibly have unspecified other… Affected: 10