Suse Linux Enterprise Software Development Kit vulnerabilities

35 CVEs affecting Suse Linux Enterprise Software Development Kit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-5753, published 2018-01-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5753, published 2018-01-04. Medium severity, CVSS 5.6. EPSS: 93.8% chance of exploitation in the next 30 days. Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2014-1511, published 2014-03-19. Critical severity, CVSS 9.8. EPSS: 83.6% chance of exploitation in the next 30 days. Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
CVE-2014-1510, published 2014-03-19. Critical severity, CVSS 9.8. EPSS: 82.3% chance of exploitation in the next 30 days. The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript…
CVE-2013-4854, published 2013-07-29. High severity, CVSS 7.8. EPSS: 34.2% chance of exploitation in the next 30 days. The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows…
CVE-2014-1512, published 2014-03-19. High severity, CVSS 10.0. EPSS: 29.3% chance of exploitation in the next 30 days. Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows…
CVE-2013-6671, published 2013-12-11. Critical severity, CVSS 9.8. EPSS: 11.1% chance of exploitation in the next 30 days. The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary…
CVE-2013-5618, published 2013-12-11. Critical severity, CVSS 9.8. EPSS: 10.4% chance of exploitation in the next 30 days. Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2,…
CVE-2013-5613, published 2013-12-11. Critical severity, CVSS 9.8. EPSS: 9.4% chance of exploitation in the next 30 days. Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows…
CVE-2014-1493, published 2014-03-19. Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to…
CVE-2013-5609, published 2013-12-11. Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to…

Latest

CVE-2016-5244, published 2016-06-27. High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days. The rds_inc_info_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from…
CVE-2016-3951, published 2016-05-02. Medium severity, CVSS 4.6. EPSS: 0.6% chance of exploitation in the next 30 days. Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified…
CVE-2015-8845, published 2016-04-27. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim…
CVE-2015-3340, published 2015-04-28. Low severity, CVSS 2.9. EPSS: 0.8% chance of exploitation in the next 30 days. Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from memory via a (1) XEN_DOMCTL_gettscinfo or (2)…
CVE-2015-0500, published 2015-04-16. Medium severity, CVSS 4.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVE-2015-0439, published 2015-04-16. Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB, a different vulnerability…
CVE-2013-1864, published 2014-05-23. Medium severity, CVSS 4.3. EPSS: 2.9% chance of exploitation in the next 30 days. The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of…
CVE-2014-1514, published 2014-03-19. Critical severity, CVSS 9.8. EPSS: 6.1% chance of exploitation in the next 30 days. vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a…
CVE-2014-1513, published 2014-03-19. High severity, CVSS 8.8. EPSS: 5.6% chance of exploitation in the next 30 days. TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an…