Linux Enterprise Software Development Kit vulnerabilities

Product

Linux Enterprise Software Development Kit

by Suse · last CVE Apr 27, 2022

On CISA KEVExploited in the wildRansomware-linked

297

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities297 In the news2 Timeline

Severity mix

Critical 23High 27Medium 29Low 2

Severity

All severities297 Critical23 High27 Medium29 Low2

Exploitation

On CISA KEV12 Exploited in the wild12

Watch

Add Linux Enterprise Software Development Kit to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2014-1500	–	4%	Mar 19	Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Affected: 11
CVE-2014-1499	–	2%	Mar 19	Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering… Affected: 11
CVE-2014-1498	–	2%	Mar 19	The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to… Affected: 11
CVE-2014-1494	–	5%	Mar 19	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory… Affected: 11
CVE-2014-2324	–	30%	Mar 14	Multiple directory traversal vulnerabilities in (1) mod_evhost and (2) mod_simple_vhost in lighttpd before 1.4.35 allow remote attackers to read arbitrary files via a Affected: 11
CVE-2014-1491	–	5%	Feb 6	Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and… Affected: 11
CVE-2014-1490	–	4%	Feb 6	Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3,… Affected: 11
CVE-2014-1489	–	2%	Feb 6	Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of… Affected: 11
CVE-2014-1488	–	7%	Feb 6	The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a… Affected: 11
CVE-2014-1485	–	3%	Feb 6	The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of… Affected: 11
CVE-2014-1484	–	2%	Feb 6	Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted… Affected: 11
CVE-2014-1480	–	3%	Feb 6	The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers… Affected: 11
CVE-2013-6672	–	3%	Dec 11	Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations Affected: 11
CVE-2013-5619	–	4%	Dec 11	Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a… Affected: 11
CVE-2013-5614	–	2%	Dec 11	Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which… Affected: 11
CVE-2013-5612	–	3%	Dec 11	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by… Affected: 11
CVE-2013-5611	–	2%	Dec 11	Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by… Affected: 11
CVE-2013-5610	–	7%	Dec 11	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory… Affected: 11
CVE-2013-4365	–	14%	Oct 17	Heap-based buffer overflow in the fcgid_header_bucket_read function in fcgid_bucket.c in the mod_fcgid module before 2.3.9 for the Apache HTTP Server allows remote attackers to… Affected: 11; 11
CVE-2013-3812	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via… Affected: 11
CVE-2013-3809	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown… Affected: 11
CVE-2013-3808	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 allows remote authenticated users to affect availability… Affected: 11
CVE-2013-3805	–	2%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11
CVE-2013-3804	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect… Affected: 11
CVE-2013-3802	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote authenticated users to affect… Affected: 11
CVE-2013-3801	–	4%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11
CVE-2013-3794	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors… Affected: 11
CVE-2013-3793	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via… Affected: 11
CVE-2013-3783	–	3%	Jul 17	Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11
CVE-2013-0800	–	4%	Apr 3	Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before… Affected: 10; 11
CVE-2013-1861	–	19%	Mar 28	MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier… Affected: 11
CVE-2013-0170	–	6%	Feb 8	Use-after-free vulnerability in the virNetMessageFree function in rpc/virnetserverclient.c in libvirt 1.0.x before 1.0.2, 0.10.2 before 0.10.2.3, 0.9.11 before 0.9.11.9, and 0.9.6… Affected: 11
CVE-2013-0771	–	5%	Jan 13	Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundaries function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10; 11
CVE-2013-0770	–	6%	Jan 13	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allow remote attackers to cause a… Affected: 10; 11
CVE-2013-0769	–	6%	Jan 13	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10; 11
CVE-2013-0768	–	8%	Jan 13	Stack-based buffer overflow in the Canvas implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before… Affected: 10; 11
CVE-2013-0767	–	6%	Jan 13	The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird… Affected: 10; 11
CVE-2013-0766	–	5%	Jan 13	Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before… Affected: 10; 11
CVE-2013-0764	–	3%	Jan 13	The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and… Affected: 11
CVE-2013-0763	–	4%	Jan 13	Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.1, and SeaMonkey before… Affected: 10; 11
CVE-2013-0762	–	5%	Jan 13	Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before… Affected: 10; 11
CVE-2013-0761	–	4%	Jan 13	Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrack implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.1, Thunderbird before 17.0.2,… Affected: 10; 11
CVE-2013-0760	–	5%	Jan 13	Buffer overflow in the CharDistributionAnalysis::HandleOneChar function in Mozilla Firefox before 18.0, Thunderbird before 17.0.2, and SeaMonkey before 2.15 allows remote… Affected: 10; 11
CVE-2013-0759	–	2%	Jan 13	Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and… Affected: 10; 11
CVE-2013-0758	–	73%	Jan 13	Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and… Affected: 10; 11
CVE-2013-0757	–	61%	Jan 13	The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and… Affected: 10; 11
CVE-2013-0756	–	4%	Jan 13	Use-after-free vulnerability in the obj_toSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before… Affected: 10; 11
CVE-2013-0755	–	7%	Jan 13	Use-after-free vulnerability in the mozVibrate implementation in the Vibrate library in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2,… Affected: 10; 11
CVE-2013-0754	–	5%	Jan 13	Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before… Affected: 10; 11
CVE-2013-0753	–	51%	Jan 13	Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before… Affected: 10; 11