Read the docs

SUSE

Records1332All Threatist records
Exploited (KEV)50In CISA KEV
CVSS critical279CVSS 9.0–10.0
CVSS high499CVSS 7.0–8.9

Exploited now

SUSE records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

462 records in Linux Enterprise Desktop · all components

Priority CRITICAL 100KEV

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1883 Published 2015-07-14 Fixed CWE-416
Priority CRITICAL 100KEV

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x thro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87033 Published 2015-07-14 Fixed CWE-416
Priority CRITICAL 100KEV

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 o…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98618 Published 2015-07-08 Fixed CWE-416
Priority CRITICAL 100KEV

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99812 Published 2015-06-23 Fixed CWE-122
Priority CRITICAL 100KEV

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95341 Published 2015-02-02 No fix listed CWE-416
Priority CRITICAL 100KEV

GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown oth…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9994 Published 2014-09-25 Fixed CWE-78
Priority CRITICAL 100KEV

GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2014-09-24 Fixed CWE-78
Priority CRITICAL 100KEV

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99879 Published 2014-02-05 Fixed CWE-191
Priority CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98773 Published 2013-06-18 Fixed CWE-693
Priority CRITICAL 100KEV

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98189 Published 2012-06-07 Partial fix CWE-843
Priority CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67698 Published 2015-12-28 Fixed CWE-190
Priority CRITICAL 97KEV

Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which al…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.69021 Published 2013-06-26 Partial fix CWE-119
Priority CRITICAL 97KEV

The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, whic…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10533 Published 2013-02-27 Fixed CWE-269
Priority CRITICAL 97KEV

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.9941 Published 2011-04-13 Fixed CWE-843
Load more
Open these records in search →