suse linux enterprise server vulnerabilities (CVE)

7.8High

CVE-2026-31431 KEV 6 months ago

crypto: algif_aead - Revert to operating out-of-place

Linux Linux; Siemens SIMATIC AX Runtime Core Linux Common Debian; Siemens SIMATIC AX Runtime Core Linux Common Debian arm64; Siemens SIMATIC AX Runtime Core Linux Platform Container Common Debian Development

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in al…

98%EPSS

7.3High

CVE-2026-25702 8 months ago

nftables disabled due to incorrect kernel backport

SUSE SUSE Linux Enterprise Server

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fb…

7.5High

CVE-2023-29552 KEV 3 years ago

Service Location Protocol (SLP) Denial-of-Service Vulnerability

netapp smi-s provider; suse manager server; suse linux enterprise server; vmware esxi

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

64%EPSS

7.8High

CVE-2021-4034 KEV Used in ransomware 4 years ago

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

polkit

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec does…

95%EPSS

5.5Medium

CVE-2016-3718 KEV 10 years ago

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

76%EPSS

5.5Medium

CVE-2016-3715 KEV 10 years ago

ImageMagick Arbitrary File Deletion Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

75%EPSS

9.8Critical

CVE-2016-3427 KEV 10 years ago

Oracle Java SE and JRockit Unspecified Vulnerability

oracle jdk; oracle jre; oracle jrockit; oracle linux

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

92%EPSS

5.3Medium

CVE-2015-4902 KEV 11 years ago

Oracle Java SE Integrity Check Vulnerability

oracle jdk; oracle jre; redhat satellite; redhat enterprise linux desktop

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

14%EPSS

8.8High

CVE-2015-4495 KEV 11 years ago

Mozilla Firefox Security Feature Bypass Vulnerability

mozilla firefox; mozilla firefox os; oracle solaris; canonical ubuntu linux

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and…

69%EPSS

7.5High

CVE-2015-5477 KEV 11 years ago

ISC BIND Data Processing Errors Vulnerability

juniper junos; fedoraproject fedora; redhat enterprise linux; redhat enterprise linux aus

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

100%EPSS

9.8Critical

CVE-2015-2590 KEV 11 years ago

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

oracle jdk; oracle jre; canonical ubuntu linux; debian debian linux

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-20…

25%EPSS

10.0Critical

CVE-2015-3306 KEV 11 years ago

ProFTPD Improper Access Control Vulnerability

fedoraproject fedora; debian debian linux; opensuse tumbleweed; suse linux enterprise server

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

99%EPSS

9.8Critical

CVE-2014-7169 KEV 12 years ago

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as…

100%EPSS

9.8Critical

CVE-2014-6271 KEV 12 years ago

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature…

100%EPSS

7.8High

CVE-2014-3153 KEV 12 years ago

Linux Kernel Privilege Escalation Vulnerability

linux linux kernel; redhat enterprise linux server aus; opensuse opensuse; suse linux enterprise desktop

The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modif…

37%EPSS

8.8High

CVE-2013-1690 KEV 13 years ago

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

mozilla firefox; mozilla thunderbird; mozilla thunderbird esr; canonical ubuntu linux

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial…

69%EPSS

9.8Critical

CVE-2013-2465 KEV Used in ransomware 13 years ago

Oracle Java SE Unspecified Vulnerability

oracle jre; sun jre; suse linux enterprise desktop; suse linux enterprise java

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and avail…

99%EPSS

9.8Critical

CVE-2012-0507 KEV Used in ransomware 14 years ago

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

sun jre; oracle jre; debian debian linux; suse linux enterprise desktop

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unkno…

98%EPSS

9.8Critical

CVE-2012-1823 KEV 14 years ago

PHP-CGI Query String Parameter Vulnerability

php php; fedoraproject fedora; debian debian linux; hp hp-ux

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing c…

100%EPSS

9.8Critical

CVE-2011-3544 KEV 15 years ago

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

oracle jdk; oracle jre; canonical ubuntu linux; redhat satellite with embedded oracle

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabili…

97%EPSS

7.8High

CVE-2010-3904 KEV 15 years ago

Linux Kernel Improper Input Validation Vulnerability

linux linux kernel; opensuse opensuse; suse linux enterprise desktop; suse linux enterprise real time extension

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via c…

16%EPSS