Suse Linux Enterprise SDK vulnerabilities

19 CVEs affecting Suse Linux Enterprise SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-1504, published 2014-03-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-4002, published 2013-07-23. High severity, CVSS 7.1. EPSS: 24.7% chance of exploitation in the next 30 days. XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7…
CVE-2012-4188, published 2012-10-10. High severity, CVSS 9.3. EPSS: 14.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Convolve3x3 function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey…
CVE-2012-4186, published 2012-10-10. High severity, CVSS 9.3. EPSS: 14.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in the nsWaveReader::DecodeAudioData function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,…
CVE-2012-4180, published 2012-10-10. High severity, CVSS 9.3. EPSS: 9.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhitespace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x…
CVE-2012-4185, published 2012-10-10. High severity, CVSS 9.3. EPSS: 8.6% chance of exploitation in the next 30 days. Buffer overflow in the nsCharTraits::length function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before…
CVE-2012-4187, published 2012-10-10. High severity, CVSS 9.3. EPSS: 6.8% chance of exploitation in the next 30 days. Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 do not properly manage a certain insPos variable,…
CVE-2012-3990, published 2012-10-10. High severity, CVSS 9.3. EPSS: 5.2% chance of exploitation in the next 30 days. Use-after-free vulnerability in the IME State Manager implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and…
CVE-2012-3988, published 2012-10-10. High severity, CVSS 9.3. EPSS: 5.2% chance of exploitation in the next 30 days. Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 might allow…
CVE-2012-3995, published 2012-10-10. High severity, CVSS 9.3. EPSS: 5% chance of exploitation in the next 30 days. The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13 allows remote…
CVE-2012-4183, published 2012-10-10. High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days. Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before…

Latest

CVE-2014-1504, published 2014-03-19. Low severity, CVSS 2.6. EPSS: 2.1% chance of exploitation in the next 30 days. The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote attackers to…
CVE-2012-4184, published 2012-10-10. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8, and SeaMonkey before 2.13…
CVE-2012-4182, published 2012-10-10. High severity, CVSS 9.3. EPSS: 4.7% chance of exploitation in the next 30 days. Use-after-free vulnerability in the nsTextEditRules::WillInsert function in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbird before 16.0, Thunderbird ESR 10.x before 10.0.8,…