suse linux enterprise software development kit vulnerabilities (CVE)

CVE records published for suse linux enterprise software development kit, newest first. Follow to get an email when a new one appears.

12 results
5.5Medium
CVE-2016-3718 KEV

ImageMagick Server-Side Request Forgery (SSRF) Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

76%EPSS
5.5Medium
CVE-2016-3715 KEV

ImageMagick Arbitrary File Deletion Vulnerability

redhat enterprise linux desktop; redhat enterprise linux eus; redhat enterprise linux for ibm z systems; redhat enterprise linux for ibm z systems eus

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

75%EPSS
9.8Critical
CVE-2016-3427 KEV

Oracle Java SE and JRockit Unspecified Vulnerability

oracle jdk; oracle jre; oracle jrockit; oracle linux

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

92%EPSS
5.3Medium
CVE-2015-4902 KEV

Oracle Java SE Integrity Check Vulnerability

oracle jdk; oracle jre; redhat satellite; redhat enterprise linux desktop

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

14%EPSS
8.8High
CVE-2015-4495 KEV

Mozilla Firefox Security Feature Bypass Vulnerability

mozilla firefox; mozilla firefox os; oracle solaris; canonical ubuntu linux

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and…

69%EPSS
7.5High
CVE-2015-5477 KEV

ISC BIND Data Processing Errors Vulnerability

juniper junos; fedoraproject fedora; redhat enterprise linux; redhat enterprise linux aus

named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.

100%EPSS
9.8Critical
CVE-2014-7169 KEV

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as…

100%EPSS
9.8Critical
CVE-2014-6271 KEV

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

gnu bash; arista eos; oracle linux; qnap qts

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature…

100%EPSS
8.8High
CVE-2013-1690 KEV

Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability

mozilla firefox; mozilla thunderbird; mozilla thunderbird esr; canonical ubuntu linux

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial…

69%EPSS
9.8Critical
CVE-2013-2465 KEV Used in ransomware

Oracle Java SE Unspecified Vulnerability

oracle jre; sun jre; suse linux enterprise desktop; suse linux enterprise java

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and avail…

99%EPSS
9.8Critical
CVE-2012-0507 KEV Used in ransomware

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

sun jre; oracle jre; debian debian linux; suse linux enterprise desktop

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unkno…

98%EPSS
9.8Critical
CVE-2012-1823 KEV

PHP-CGI Query String Parameter Vulnerability

php php; fedoraproject fedora; debian debian linux; hp hp-ux

sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing c…

100%EPSS