Suse Linux Enterprise Desktop (Suse) - vulnerabilities (CVEs)

81 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2023-09-19. Vendor: Suse.

CVEs of Suse Linux Enterprise Desktop

CVE-2023-32182 - CVSS 7.8 (high), 2023-09-19: A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 SP5 postfix, SUSE SUSE Linux…
CVE-2020-6422 - CVSS 8.8 (high), 2020-03-23: Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6427 - CVSS 8.8 (high), 2020-03-23: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6449 - CVSS 8.8 (high), 2020-03-23: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6426 - CVSS 6.5 (medium), 2020-03-23: Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
CVE-2020-6429 - CVSS 8.8 (high), 2020-03-23: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6424 - CVSS 8.8 (high), 2020-03-23: Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6428 - CVSS 8.8 (high), 2020-03-23: Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-19655 - CVSS 8.8 (high), 2018-11-29: A stack-based buffer overflow in the find_green() function of dcraw through 9.28, as used in ufraw-batch and many other products, may allow a remote attacker…
CVE-2011-4190 - CVSS 5.9 (medium), 2018-06-08: The kdump implementation is missing the host key verification in the kdump and mkdumprd OpenSSH integration of kdump prior to version 2012-01-20. This is…
CVE-2017-5753 - CVSS 5.6 (medium), 2018-01-04: Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local…
CVE-2015-5707 - CVSS 4.6 (medium), 2015-10-19: Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of…
CVE-2015-3340 - CVSS 2.9 (low), 2015-04-28: Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1)…
CVE-2015-0500 - CVSS 4 (medium), 2015-04-16: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVE-2015-0491 - CVSS 10 (critical), 2015-04-16: Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity,…
CVE-2015-3042 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-3041 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-3040 - CVSS 5 (medium), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict…
CVE-2015-3039 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-3038 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0360 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0358 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0354 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0355 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0353 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0352 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0351 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0350 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0349 - CVSS 10 (critical), 2015-04-14: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on…
CVE-2015-0348 - CVSS 10 (critical), 2015-04-14: Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows…
CVE-2015-0347 - CVSS 10 (critical), 2015-04-14: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute…
CVE-2015-0346 - CVSS 10 (critical), 2015-04-14: Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux…
CVE-2014-8121 - CVSS 5 (medium), 2015-03-27: DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if a file…
CVE-2014-0553 - CVSS 10 (critical), 2014-09-10: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x before 15.0.0.152 on Windows and OS X and before 11.2.202.406 on Linux,…
CVE-2014-1739 - CVSS 2.1 (low), 2014-06-23: The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which…
CVE-2013-1864 - CVSS 4.3 (medium), 2014-05-23: The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows…
CVE-2014-0196 - CVSS 5.5 (medium), 2014-05-07: The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case,…
CVE-2014-2706 - CVSS 7.1 (high), 2014-04-14: Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network…
CVE-2014-1510 - CVSS 9.8 (critical), 2014-03-19: The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote…
CVE-2014-1513 - CVSS 8.8 (high), 2014-03-19: TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a…
CVE-2014-1497 - CVSS 8.8 (high), 2014-03-19: The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before…
CVE-2014-1509 - CVSS 8.8 (high), 2014-03-19: Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird…
CVE-2014-1512 - CVSS 10 (critical), 2014-03-19: Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before…
CVE-2014-1496 - CVSS 5.5 (medium), 2014-03-19: Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by…
CVE-2014-1508 - CVSS 9.1 (critical), 2014-03-19: The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25…
CVE-2014-1511 - CVSS 9.8 (critical), 2014-03-19: Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup…
CVE-2014-1514 - CVSS 9.8 (critical), 2014-03-19: vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the…
CVE-2014-1493 - CVSS 9.8 (critical), 2014-03-19: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and…
CVE-2014-1505 - CVSS 7.5 (high), 2014-03-19: The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote…
CVE-2014-1487 - CVSS 7.5 (high), 2014-02-06: The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote…
CVE-2014-1481 - CVSS 7.5 (high), 2014-02-06: Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended…
CVE-2014-1479 - CVSS 7.5 (high), 2014-02-06: The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24…
CVE-2014-1486 - CVSS 9.8 (critical), 2014-02-06: Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and…
CVE-2014-1477 - CVSS 9.8 (critical), 2014-02-06: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and…
CVE-2014-1482 - CVSS 8.8 (high), 2014-02-06: RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to…
CVE-2013-6671 - CVSS 9.8 (critical), 2013-12-11: The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23…
CVE-2013-5618 - CVSS 9.8 (critical), 2013-12-11: Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before…
CVE-2013-5615 - CVSS 9.8 (critical), 2013-12-11: The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not…
CVE-2013-5613 - CVSS 9.8 (critical), 2013-12-11: Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird…
CVE-2013-5616 - CVSS 9.8 (critical), 2013-12-11: Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,…
CVE-2013-5609 - CVSS 9.8 (critical), 2013-12-11: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and…
CVE-2012-5830 - CVSS 8.8 (high), 2012-11-21: Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11,…
CVE-2010-3881 - CVSS 2.1 (low), 2010-12-23: arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive…
CVE-2010-2537 - CVSS 7.1 (high), 2010-09-30: The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1)…
CVE-2010-3081 - CVSS 7.8 (high), 2010-09-24: The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate…
CVE-2010-3078 - CVSS 5.5 (medium), 2010-09-21: The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which…
CVE-2010-2942 - CVSS 5.5 (medium), 2010-09-21: The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members…
CVE-2010-2960 - CVSS 7.8 (high), 2010-09-08: The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists,…
CVE-2010-2066 - CVSS 5.5 (medium), 2010-09-08: The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a…
CVE-2010-2798 - CVSS 7.8 (high), 2010-09-08: The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel…
CVE-2010-2524 - CVSS 7.8 (high), 2010-09-08: The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's…
CVE-2010-2495 - CVSS 10 (critical), 2010-09-08: The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values…
CVE-2010-2297 - CVSS 9.3 (critical), 2010-06-15: rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application…
CVE-2010-2302 - CVSS 10 (critical), 2010-06-15: Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption)…
CVE-2010-2301 - CVSS 4.3 (medium), 2010-06-15: Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject…
CVE-2010-1770 - CVSS 9.3 (critical), 2010-06-11: WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70…
CVE-2009-3547 - CVSS 7 (high), 2009-11-04: Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and…
CVE-2009-3621 - CVSS 5.5 (medium), 2009-10-22: net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace…
CVE-2007-6716 - CVSS 5.5 (medium), 2008-09-04: fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of…
CVE-2008-3275 - CVSS 5.5 (medium), 2008-08-12: The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a…
CVE-2008-2812 - CVSS 7.8 (high), 2008-07-09: The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly…