Suse

Linux Enterprise Desktop

460 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2012-0449

  • EPSS 10.94%
  • Published 01.02.2012 16:55:01
  • Last modified 11.04.2025 00:51:21

Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary cod...

9.3

CVE-2011-3659

Exploit
  • EPSS 76.08%
  • Published 01.02.2012 16:55:00
  • Last modified 11.04.2025 00:51:21

Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect Attribu...

9.3

CVE-2012-0442

Exploit
  • EPSS 1.44%
  • Published 01.02.2012 16:55:00
  • Last modified 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corru...

10

CVE-2011-4862

Exploit
  • EPSS 92.41%
  • Published 25.12.2011 01:55:02
  • Last modified 11.04.2025 00:51:21

Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to exec...

6.8

CVE-2011-4516

  • EPSS 47.82%
  • Published 15.12.2011 03:57:34
  • Last modified 11.04.2025 00:51:21

Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding st...

6.8

CVE-2011-4517

  • EPSS 42.13%
  • Published 15.12.2011 03:57:34
  • Last modified 11.04.2025 00:51:21

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a deni...

9.3

CVE-2011-3439

  • EPSS 6.54%
  • Published 11.11.2011 18:55:01
  • Last modified 11.04.2025 00:51:21

FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font in a document.

7.5

CVE-2011-2660

  • EPSS 1.09%
  • Published 06.09.2011 16:55:08
  • Last modified 11.04.2025 00:51:21

The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.

6.5

CVE-2011-1526

  • EPSS 0.23%
  • Published 11.07.2011 20:55:01
  • Last modified 11.04.2025 00:51:21

ftpd.c in the GSS-API FTP daemon in MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.1 and earlier does not check the krb5_setegid return value, which allows remote authenticated users to bypass intended group access restrictions, and create, ...

9.3

CVE-2011-0611

Warning Exploit
  • EPSS 92.9%
  • Published 13.04.2011 14:55:01
  • Last modified 11.04.2025 00:51:21

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on W...