SL
Product
SUSE Linux Enterprise Server
On CISA KEVExploited in the wild
129
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 24High 48Medium 25Low 3
Watch
Add SUSE Linux Enterprise Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 11; 11 |
| CVE-2020-6426 | 6.5 | Mar 23 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 12 |
| CVE-2018-19208 | 6.5 | Nov 12 | In libwpd 0.10.2, there is a NULL pointer dereference in the function WP6ContentListener::defineTable in WP6ContentListener.cpp that will lead to a denial of service attack Affected: 11 |
| CVE-2014-1523 | 6.5 | Apr 30 | Heap-based buffer overflow in the read_u32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote… Affected: 10; 11 |
| CVE-2020-15707 | 6.4 | Jul 29 | Integer overflows were discovered in the functions grub_cmd_initrd and grub_initrd_init in the efilinux component of GRUB2, as shipped in Debian, Red Hat, and Ubuntu (the… Affected: 11; 12; 15 |
| CVE-2020-15706 | 6.4 | Jul 29 | GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function… Affected: 11; 12; 15 |
| CVE-2020-15705 | 6.4 | Jul 29 | GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed Affected: 11; 12; 15 |
| CVE-2014-1530 | 6.1 | Apr 30 | The docshell implementation in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to trigger the… Affected: 10; 11 |
| CVE-2016-0264 | 5.6 | May 24 | Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40… Affected: 12 |
| CVE-2018-20105 | 5.5 | Jan 27 | A Inclusion of Sensitive Information in Log Files vulnerability in yast2-rmt of SUSE Linux Enterprise Server 15; openSUSE Leap allows local attackers to learn the password if they… Affected: 15 |
| CVE-2014-8559 | 5.5 | Nov 10 | The d_walk function in fs/dcache.c in the Linux kernel through 3.17.2 does not properly maintain the semantics of rename_lock, which allows local users to cause a denial of… Affected: 11 |
| CVE-2014-3647 | 5.5 | Nov 10 | arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, which allows guest OS users to cause a denial of service… Affected: 11 |
| CVE-2014-3646 | 5.5 | Nov 10 | arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial… Affected: 11 |
| CVE-2014-3610 | 5.5 | Nov 10 | The WRMSR processing functionality in the KVM subsystem in the Linux kernel through 3.17.2 does not properly handle the writing of a non-canonical address to a model-specific… Affected: 11 |
| CVE-2014-1496 | 5.5 | Mar 19 | Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted… Affected: 11; 11 |
| CVE-2010-3078 | 5.5 | Sep 21 | The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to… Affected: 11 |
| CVE-2010-2942 | 5.5 | Sep 21 | The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump… Affected: 10; 11; 11 |
| CVE-2010-2066 | 5.5 | Sep 8 | The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that… Affected: 11 |
| CVE-2009-3621 | 5.5 | Oct 22 | net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening… Affected: 10; 10 |
| CVE-2007-6716 | 5.5 | Sep 4 | fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as… Affected: 10; 10 |
| CVE-2008-3275 | 5.5 | Aug 12 | The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a… Affected: 10 |
| CVE-2011-4190 | 5.3 | Jun 8 | The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20 Affected: 11; 11; 11.0 |
| CVE-2019-15624 | 4.9 | Feb 4 | Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders Affected: 12 |
| CVE-2014-8086 | 4.7 | Oct 13 | Race condition in the ext4_file_write_iter function in fs/ext4/file.c in the Linux kernel through 3.17 allows local users to cause a denial of service (file unavailability) via a… Affected: 11 |
| CVE-2015-7976 | 4.3 | Jan 30 | The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 12 |
Showing 25