suse linux enterprise software development kit CVEs

Look up CVE IDs Status Exploitation Severity

Reset

Overview 112 matches · 2 in Waratek scope · 1 protected · 4 exploited · 0 CISA KEV · 16 public PoC · 5 EPSS ≥ 0.5

112matches 2in Waratek scope1.8% 1protected0.9% 4exploited3.6% 0CISA KEV0.0% 16public PoC14.3% 5EPSS ≥ 0.54.5%

Protected by Waratek 1 0.9% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 0.9% Outside Waratek scope 4 3.6% Not applicable 106 94.6% Withdrawn CVE 0 0.0%

Critical 18 16.1% High 45 40.2% Medium 45 40.2% Low 4 3.6% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 1 0.9% partly blocked 0 0.0% not blocked 111 99.1% not established 0 0.0% unrecorded 0 0.0%

Exploited 4 3.6% Working exploit published 12 10.7% Proof of concept only 1 0.9% Forecast only 0 0.0% No public exploit 95 84.8%

split by StatusSeverityProtectionExploit maturity peak 41 / year

20121 Not applicable1 High1 not blocked1 No public exploit1 201310 Not applicable10 Critical6 High1 Medium3 not blocked10 Exploited1 No public exploit9 201421 Outside Waratek scope1 Not applicable20 Critical7 High9 Medium4 Low1 not blocked21 Exploited2 Proof of concept only1 No public exploit18 201523 Outside Waratek scope2 Not applicable21 High13 Medium9 Low1 not blocked23 Working exploit published1 No public exploit22 201641 Protected by Waratek1 No exploit published1 Not applicable39 High16 Medium24 Low1 blocked by ARMR today1 not blocked40 Working exploit published11 No public exploit30 201714 Not applicable14 Critical5 High5 Medium4 not blocked14 No public exploit14 20181 Outside Waratek scope1 Medium1 not blocked1 Exploited1 20190 20201 Not applicable1 Low1 not blocked1 No public exploit1

201220132014201520162017201820192020

112 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2014-1477	Critical	2014-02-06	Not applicable	No public exploit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2013-6673	Medium	2013-12-11	Not applicable	No public exploit	Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.
CVE-2013-6671	Critical	2013-12-11	Not applicable	No public exploit	The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.
CVE-2013-5618	Critical	2013-12-11	Not applicable	No public exploit	Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.
CVE-2013-5616	Critical	2013-12-11	Not applicable	No public exploit	Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.
CVE-2013-5615	Critical	2013-12-11	Not applicable	No public exploit	The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.
CVE-2013-5613	Critical	2013-12-11	Not applicable	No public exploit	Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.
CVE-2013-5609	Critical	2013-12-11	Not applicable	No public exploit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
CVE-2013-4589	Medium	2013-11-23	Not applicable	No public exploit	The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.
CVE-2013-4419	Medium	2013-11-05	Not applicable	No public exploit	The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.
CVE-2013-4854	High	2013-07-29	Not applicable	Exploited	The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.
CVE-2012-5830	High	2012-11-21	Not applicable	No public exploit	Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2014-1477

Critical

2014-02-06

Not applicable

No public exploit

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVE-2013-6673

Medium

2013-12-11

Not applicable

No public exploit

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.

CVE-2013-6671

Critical

2013-12-11

Not applicable

No public exploit

The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code via crafted use of JavaScript code for ordered list elements.

CVE-2013-5618

Critical

2013-12-11

Not applicable

No public exploit

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by triggering improper garbage collection.

CVE-2013-5616

Critical

2013-12-11

Not applicable

No public exploit

Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors related to mListeners event listeners.

CVE-2013-5615

Critical

2013-12-11

Not applicable

No public exploit

The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs, which has unspecified impact and remote attack vectors.

CVE-2013-5613

Critical

2013-12-11

Not applicable

No public exploit

Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via vectors involving synthetic mouse movement, related to the RestyleManager::GetHoverGeneration function.

CVE-2013-5609

Critical

2013-12-11

Not applicable

No public exploit

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVE-2013-4589

Medium

2013-11-23

Not applicable

No public exploit

The ExportAlphaQuantumType function in export.c in GraphicsMagick before 1.3.18 might allow remote attackers to cause a denial of service (crash) via vectors related to exporting the alpha of an 8-bit RGBA image.

CVE-2013-4419

Medium

2013-11-05

Not applicable

No public exploit

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

CVE-2013-4854

High

2013-07-29

Not applicable

Exploited

The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to cause a denial of service (assertion failure and named daemon exit) via a query with a malformed RDATA section that is not properly handled during construction of a log message, as exploited in the wild in July 2013.

CVE-2012-5830

High

2012-11-21

Not applicable

No public exploit

Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.