Read the docs

SUSE

Records1332All Threatist records
Exploited (KEV)50In CISA KEV
CVSS critical279CVSS 9.0–10.0
CVSS high499CVSS 7.0–8.9

Exploited now

SUSE records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

105 records in Linux Enterprise Workstation Extension · all components

Priority CRITICAL 100KEV

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1883 Published 2015-07-14 Fixed CWE-416
Priority CRITICAL 100KEV

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x thro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.87033 Published 2015-07-14 Fixed CWE-416
Priority CRITICAL 100KEV

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 o…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.98618 Published 2015-07-08 Fixed CWE-416
Priority CRITICAL 100KEV

Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspec…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99812 Published 2015-06-23 Fixed CWE-122
Priority CRITICAL 100KEV

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unsp…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.95341 Published 2015-02-02 No fix listed CWE-416
Priority CRITICAL 97KEV

Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe A…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.67698 Published 2015-12-28 Fixed CWE-190
Priority CRITICAL 93KEV

In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.98114 Published 2026-04-22 Fixed in 5.10.254, 5.15.204 +6 CWE-669
TI-2021-02923 CVE-2021-4034 · GHSA-qgr2-xgqv-24x8

Out-of-bounds write in polkit

Priority CRITICAL 93KEV

A local privilege escalation vulnerability was found on polkit's pkexec utility.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.94921 Published 2022-01-28 Fixed CWE-787
Priority HIGH 74

The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or poss…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.52841 Published 2018-01-03 Partial fix CWE-416
Priority MEDIUM 52

The Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the Voodoo interface, w…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06098 Published 2014-06-11 No fix listed CWE-119
Priority MEDIUM 52

Multiple integer signedness errors in the Dispatch_Write function in proxy/dispatcher/idirectfbsurface_dispatcher.c in DirectFB 1.4.13 allow remote attackers to cause a denial of service (crash) and possibly execute arbi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06776 Published 2014-06-11 No fix listed CWE-189
Priority MEDIUM 48

The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to c…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.4031 Published 2014-05-06 Fixed CWE-476
Load more
Open these records in search →