[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyFyjHMikHKkfZVE7PoBl4NCHdlyuUDldNk1rfyJBD5c":3,"g5a-family:suse\u002Fmanager_proxy":129,"g5a-ex:suse\u002Fmanager_proxy@*":130},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":90,"seoMetadata":107,"meta":126},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":27},"suse","manager_proxy",4,18,"2022-04-27",[13,17,21,25],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},"2.1",16,3,{"version":18,"cve_count":19,"kev_count":20,"has_kev":4},"4.1",2,1,{"version":22,"cve_count":20,"kev_count":23,"has_kev":24},"4.2",0,false,{"version":26,"cve_count":20,"kev_count":23,"has_kev":24},"4.3","Manager Proxy by Suse is a technology product with 4 tracked versions and 18 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":4},{"version":22,"cve_count":20,"kev_count":23,"has_kev":24},{"version":26,"cve_count":20,"kev_count":23,"has_kev":24},[34,42,49,56,60,66,71,77,81,86],{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":4,"epssScore":41},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,"v3.1","High",0.94921,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":39,"severity":47,"isKev":4,"epssScore":48},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"Critical",0.92334,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":39,"severity":54,"isKev":4,"epssScore":55},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,"Medium",0.7565,{"cveId":57,"description":58,"publishedDate":52,"cvssScore":53,"cvssVersion":39,"severity":54,"isKev":4,"epssScore":59},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":39,"severity":40,"isKev":24,"epssScore":65},"CVE-2016-1286","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.","2016-03-09",8.6,0.621,{"cveId":67,"description":68,"publishedDate":63,"cvssScore":69,"cvssVersion":39,"severity":54,"isKev":24,"epssScore":70},"CVE-2016-1285","named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.",6.8,0.59143,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":39,"severity":40,"isKev":24,"epssScore":76},"CVE-2016-4957","ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.","2016-07-05",7.5,0.44936,{"cveId":78,"description":79,"publishedDate":74,"cvssScore":75,"cvssVersion":39,"severity":40,"isKev":24,"epssScore":80},"CVE-2016-4953","ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.",0.17245,{"cveId":82,"description":83,"publishedDate":74,"cvssScore":84,"cvssVersion":39,"severity":54,"isKev":24,"epssScore":85},"CVE-2016-4956","ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.",5.3,0.16351,{"cveId":87,"description":88,"publishedDate":74,"cvssScore":75,"cvssVersion":39,"severity":40,"isKev":24,"epssScore":89},"CVE-2016-4954","The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.",0.13343,[91,96,100,104],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"severity":40,"isKev":4,"epssScore":41,"cisaVulnName":97,"cisaDateAdded":98,"cisaShortDescription":99,"cisaRequiredAction":95},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":57,"description":58,"publishedDate":52,"cvssScore":53,"severity":54,"isKev":4,"epssScore":59,"cisaVulnName":101,"cisaDateAdded":102,"cisaShortDescription":103,"cisaRequiredAction":95},"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":105,"cisaDateAdded":102,"cisaShortDescription":106,"cisaRequiredAction":95},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":108,"metaDescription":109,"keywords":110,"structuredData":111},"Manager Proxy by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Manager Proxy by Suse covering 4 versions with 18 tracked vulnerabilities including 1 critical and 1 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Manager Proxy vulnerabilities, Manager Proxy security, Manager Proxy CVE, Suse Manager Proxy, Manager Proxy threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Manager Proxy KEV, Manager Proxy exploited vulnerabilities",{"@context":112,"@type":113,"name":114,"description":109,"url":115,"manufacturer":116,"applicationCategory":120,"softwareVersion":121,"mainEntity":122},"https:\u002F\u002Fschema.org","SoftwareApplication","Manager Proxy","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fmanager_proxy",{"@type":117,"name":118,"url":119},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","4 versions tracked",{"@type":123,"name":124,"description":125,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Manager Proxy Security Vulnerabilities","Security vulnerabilities affecting Manager Proxy by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":127,"apiVersion":128},"2026-10-17T15:13:18.133Z","3.0",[],{"rows":131,"total":9,"capped":24,"failed":23},[132,136,140,144],{"cveId":43,"name":92,"severity":47,"cvss":46,"added":93,"epss":48,"published":133,"ranges":134,"checked":4,"hits":135,"covers":24},"2016-04-21T11:00:21.667",[14],[],{"cveId":35,"name":97,"severity":40,"cvss":38,"added":98,"epss":41,"published":137,"ranges":138,"checked":4,"hits":139,"covers":24},"2022-01-28T20:15:12.193",[18],[],{"cveId":57,"name":101,"severity":54,"cvss":53,"added":102,"epss":59,"published":141,"ranges":142,"checked":4,"hits":143,"covers":24},"2016-05-05T18:59:04.727",[14],[],{"cveId":50,"name":105,"severity":54,"cvss":53,"added":102,"epss":55,"published":145,"ranges":146,"checked":4,"hits":147,"covers":24},"2016-05-05T18:59:08.96",[14],[]]