SL
Product
Suse Linux Enterprise Server
On CISA KEVExploited in the wild
128
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 23High 48Medium 25Low 3
Watch
Add Suse Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5154 | – | Aug 12 | Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDROM drive enabled, allows local guest users to execute… Affected: 12 |
| CVE-2015-2738 | – | Jul 6 | The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 12 |
| CVE-2015-2737 | – | Jul 6 | The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before… Affected: 12 |
| CVE-2015-2734 | – | Jul 6 | The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and… Affected: 12 |
| CVE-2015-3340 | – | Apr 28 | Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo… Affected: 11.0; 12 |
| CVE-2015-2041 | – | Apr 21 | net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information from… Affected: 10 |
| CVE-2015-0500 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors Affected: 11.0; 11.0 |
| CVE-2015-0439 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a… Affected: 11.0 |
| CVE-2014-8121 | – | Mar 27 | DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file is open, which allows… Affected: 11.0; 11.0; 11.0 |
| CVE-2015-0413 | – | Jan 21 | Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability Affected: 11.0 |
| CVE-2014-9116 | – | Dec 2 | The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service… Affected: 12 |
| CVE-2014-3601 | – | Sep 1 | The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pages during the handling of a mapping failure, which allows… Affected: 11 |
| CVE-2014-1739 | – | Jun 23 | The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to… Affected: 11; 11 |
| CVE-2014-2978 | – | Jun 11 | The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute… Affected: 12 |
| CVE-2014-2977 | – | Jun 11 | Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of… Affected: 12 |
| CVE-2014-0181 | – | Apr 27 | The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local… Affected: 11 |
| CVE-2014-2706 | – | Apr 14 | Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly… Affected: 11; 11 |
| CVE-2014-1512 | – | Mar 19 | Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey… Affected: 11; 11 |
| CVE-2011-1585 | – | Jun 8 | The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local… Affected: 10 |
| CVE-2011-3026 | – | Feb 16 | Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown… Affected: 11; 11; 11 |
| CVE-2010-3881 | – | Dec 23 | arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from… Affected: 11 |
| CVE-2010-4494 | – | Dec 7 | Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service… Affected: 11 |
| CVE-2010-4008 | – | Nov 16 | libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of… Affected: 10; 11; 11 |
| CVE-2010-2495 | – | Sep 8 | The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an… Affected: 11 |
| CVE-2010-2302 | – | Jun 15 | Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute… Affected: 10; 11 |
| CVE-2010-2301 | – | Jun 15 | Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or… Affected: 10; 11 |
| CVE-2010-2297 | – | Jun 15 | rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute… Affected: 10; 11 |
| CVE-2010-1770 | – | Jun 11 | WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle… Affected: 10; 11 |