[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxz7hL216h00iGol-hXL0hrE6ydxcKzuGu8Jl6e3j3p4":3,"g5a-family:suse\u002Fmanager":122,"g5a-ex:suse\u002Fmanager@*":132},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":87,"seoMetadata":100,"meta":119},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":23},"suse","manager",3,22,"2019-05-13",[13,18,21],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},"1.7",8,0,false,{"version":19,"cve_count":20,"kev_count":9,"has_kev":4},"2.1",13,{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.7","Manager by Suse is a technology product with 3 tracked versions and 22 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":14,"cve_count":15,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":9,"has_kev":4},{"version":22,"cve_count":16,"kev_count":16,"has_kev":17},[29,37,44,48,55,62,67,73,77,83],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":4,"epssScore":36},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"v3.1","Critical",0.92334,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":4,"epssScore":43},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,"Medium",0.7565,{"cveId":45,"description":46,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":4,"epssScore":47},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":42,"isKev":17,"epssScore":54},"CVE-2015-2808","The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","2015-04-01",5,"v2",0.73851,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":34,"severity":60,"isKev":17,"epssScore":61},"CVE-2016-1286","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.","2016-03-09",8.6,"High",0.621,{"cveId":63,"description":64,"publishedDate":58,"cvssScore":65,"cvssVersion":34,"severity":42,"isKev":17,"epssScore":66},"CVE-2016-1285","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.",6.8,0.59143,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":34,"severity":60,"isKev":17,"epssScore":72},"CVE-2016-4953","ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.","2016-07-05",7.5,0.17245,{"cveId":74,"description":75,"publishedDate":70,"cvssScore":71,"cvssVersion":34,"severity":60,"isKev":17,"epssScore":76},"CVE-2016-4954","The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",0.13343,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":71,"cvssVersion":81,"severity":60,"isKev":17,"epssScore":82},"CVE-2015-5300","The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote attackers to set NTP to an arbitrary time when started with the -g option, or to alter the time by up to 900 seconds otherwise by responding to an unspecified number of requests from trusted sources, and leveraging a resulting denial of service (abort and restart).","2017-07-21","v3.0",0.0913,{"cveId":84,"description":85,"publishedDate":80,"cvssScore":71,"cvssVersion":81,"severity":60,"isKev":17,"epssScore":86},"CVE-2015-5194","The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands.",0.06483,[88,93,97],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"severity":35,"isKev":4,"epssScore":36,"cisaVulnName":89,"cisaDateAdded":90,"cisaShortDescription":91,"cisaRequiredAction":92},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":45,"description":46,"publishedDate":40,"cvssScore":41,"severity":42,"isKev":4,"epssScore":47,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":92},"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"severity":42,"isKev":4,"epssScore":43,"cisaVulnName":98,"cisaDateAdded":95,"cisaShortDescription":99,"cisaRequiredAction":92},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":101,"metaDescription":102,"keywords":103,"structuredData":104},"Manager by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Manager by Suse covering 3 versions with 22 tracked vulnerabilities including 1 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Manager vulnerabilities, Manager security, Manager CVE, Suse Manager, Manager threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Manager KEV, Manager exploited vulnerabilities",{"@context":105,"@type":106,"name":107,"description":102,"url":108,"manufacturer":109,"applicationCategory":113,"softwareVersion":114,"mainEntity":115},"https:\u002F\u002Fschema.org","SoftwareApplication","Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fmanager",{"@type":110,"name":111,"url":112},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","3 versions tracked",{"@type":116,"name":117,"description":118,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Manager Security Vulnerabilities","Security vulnerabilities affecting Manager by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":120,"apiVersion":121},"2026-10-17T15:13:19.790Z","3.0",[123,126,129],{"product":124,"cves":125},"manager_proxy",18,{"product":127,"cves":128},"manager_server",16,{"product":130,"cves":131},"manager_retail_branch_server",1,{"rows":133,"total":9,"capped":17,"failed":16},[134,138,142],{"cveId":30,"name":89,"severity":35,"cvss":33,"added":90,"epss":36,"published":135,"ranges":136,"checked":4,"hits":137,"covers":17},"2016-04-21T11:00:21.667",[19],[],{"cveId":45,"name":94,"severity":42,"cvss":41,"added":95,"epss":47,"published":139,"ranges":140,"checked":4,"hits":141,"covers":17},"2016-05-05T18:59:04.727",[19],[],{"cveId":38,"name":98,"severity":42,"cvss":41,"added":95,"epss":43,"published":143,"ranges":144,"checked":4,"hits":145,"covers":17},"2016-05-05T18:59:08.96",[19],[]]