Linux Enterprise Server vulnerabilities | LiveThreat CVE Feed

Product

Linux Enterprise Server

by Suse · last CVE Apr 22, 2026

On CISA KEVExploited in the wildRansomware-linked

476

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities476 In the news12 Timeline

Severity mix

Critical 30High 64Medium 60Low 4

Severity

All severities476 Critical30 High64 Medium60 Low4

Exploitation

On CISA KEV20 Exploited in the wild20

Watch

Add Linux Enterprise Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2015-3306 In wildKEV	10.0	99%	May 18	ProFTPD Improper Access Control Vulnerability Affected: 15; 15
CVE-2016-3427 In wildKEV	9.8	92%	Apr 21	Oracle Java SE and JRockit Unspecified Vulnerability Affected: 10; 11; 11; 11; 12; 12
CVE-2015-2590 In wildKEV	9.8	25%	Jul 16	Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability Affected: 12
CVE-2014-7169 In wildKEV	9.8	100%	Sep 25	GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10; 10; 11; 11; 11; 11; +1 more
CVE-2014-6271 In wildKEV	9.8	100%	Sep 24	GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10; 10; 11; 11; 11; 11; +1 more
CVE-2013-2465 RansomwareIn wildKEV	9.8	99%	Jun 18	Oracle Java SE Unspecified Vulnerability Affected: 10; 10; 11; 11; 11; 11
CVE-2012-0507 RansomwareIn wildKEV	9.8	98%	Jun 7	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 10; 11; 11; 11
CVE-2012-1823 In wildKEV	9.8	100%	May 11	PHP-CGI Query String Parameter Vulnerability Affected: 10; 11; 11
CVE-2011-3544 In wildKEV	9.8	97%	Oct 19	Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Affected: 10
CVE-2026-25702	9.8	0%	Mar 5	A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be… Affected: 12
CVE-2019-18903	9.8	2%	Mar 2	A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or… Affected: 12; 15
CVE-2019-18902	9.8	2%	Mar 2	A Use After Free vulnerability in wicked of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15; openSUSE Leap 15.1, Factory allows remote attackers to cause DoS or… Affected: 12; 15
CVE-2016-1000030	9.8	2%	Sep 5	Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and… Affected: 11
CVE-2017-18017	9.8	53%	Jan 3	The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 11; 11; 12; 12; 12; 12; +2 more
CVE-2017-14491	9.8	86%	Oct 4	Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 11; 11; 12
CVE-2014-9852	9.8	3%	Mar 17	distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors Affected: 12
CVE-2016-5772	9.8	10%	Aug 7	Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote… Affected: 11
CVE-2016-5118	9.8	50%	Jun 10	The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a \| (pipe) character at the start of a… Affected: 12; 12.0
CVE-2016-0718	9.8	13%	May 26	Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: 11; 12; 12
CVE-2015-8779	9.8	6%	Apr 19	Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service… Affected: 11; 11; 11; 11; 12
CVE-2015-8778	9.8	6%	Apr 19	Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute… Affected: 11; 11; 11; 11; 12
CVE-2014-9761	9.8	6%	Apr 19	Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or… Affected: 11.0; 11.0; 11.0; 11.0; 12
CVE-2016-2324	9.8	18%	Apr 8	Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer… Affected: 12.0
CVE-2016-2315	9.8	17%	Apr 8	revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,… Affected: 12
CVE-2015-0192	9.8	4%	Jul 2	Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to… Affected: 10; 11; 11; 12
CVE-2010-2941	9.8	6%	Nov 5	ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of… Affected: 9
CVE-2010-1205	9.8	43%	Jun 30	Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG… Affected: 9; 10; 11; 11
CVE-2020-8025	9.3	0%	Aug 7	A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux… Affected: 15; 15; 15
CVE-2015-5041	9.1	4%	Jun 6	The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive… Affected: 11; 11; 12
CVE-2015-8776	9.1	5%	Apr 19	The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain… Affected: 11; 11; 11; 11; 12