[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiVhVfzvcNeGhrZELiOlxYmP62pXmD-42TdS9izQ0psg":3,"g5a-family:suse\u002Fsuse_linux_enterprise_server":142,"g5a-ex:suse\u002Fsuse_linux_enterprise_server@*":143},{"success":4,"data":5},true,{"product":6,"versions":33,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":104,"seoMetadata":120,"meta":139},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":32},"suse","suse_linux_enterprise_server",5,143,2,"2023-02-07",[14,19,23,26,29],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10",24,0,false,{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},"11",80,1,{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},"11.0",7,{"version":27,"cve_count":28,"kev_count":22,"has_kev":4},"12",49,{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},"15",14,"Suse Linux Enterprise Server by Suse is a technology product with 5 tracked versions and 143 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":22,"has_kev":4},{"version":24,"cve_count":25,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":22,"has_kev":4},{"version":30,"cve_count":31,"kev_count":17,"has_kev":18},[40,48,56,63,69,76,80,87,93,99],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":18,"epssScore":47},"CVE-2015-4000","The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.","2015-05-21",3.7,"v3.0","Low",0.9986,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":4,"epssScore":55},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,"v3.1","High",0.97485,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":53,"severity":61,"isKev":18,"epssScore":62},"CVE-2017-5753","Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","2018-01-04",5.6,"Medium",0.93838,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":45,"severity":54,"isKev":18,"epssScore":68},"CVE-2015-7547","Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A\u002FAAAA DNS queries\" and the libnss_dns.so.2 NSS module.","2016-02-18",8.1,0.90987,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":53,"severity":74,"isKev":18,"epssScore":75},"CVE-2014-1511","Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.","2014-03-19",9.8,"Critical",0.83633,{"cveId":77,"description":78,"publishedDate":72,"cvssScore":73,"cvssVersion":53,"severity":74,"isKev":18,"epssScore":79},"CVE-2014-1510","The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with chrome privileges by using an IDL fragment to trigger a window.open call.",0.82339,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":85,"severity":61,"isKev":18,"epssScore":86},"CVE-2011-3026","Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.","2012-02-16",6.8,"v2",0.72853,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":92},"CVE-2018-12122","Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.","2018-11-28",7.5,0.41288,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":97,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":98},"CVE-2020-5504","In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this page. An attacker must have a valid MySQL account to access the server.","2020-01-09",8.8,0.38778,{"cveId":100,"description":101,"publishedDate":72,"cvssScore":102,"cvssVersion":85,"severity":74,"isKev":18,"epssScore":103},"CVE-2014-1512","Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is occurring, as demonstrated by improper handling of BumpChunk objects.",10,0.29283,[105,110],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":111,"description":112,"publishedDate":113,"cvssScore":114,"severity":61,"isKev":4,"epssScore":115,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":119},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,0.22475,"Linux Kernel Race Condition Vulnerability","2023-05-12","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"Suse Linux Enterprise Server by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Suse Linux Enterprise Server by Suse covering 5 versions with 143 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Suse Linux Enterprise Server vulnerabilities, Suse Linux Enterprise Server security, Suse Linux Enterprise Server CVE, Suse Suse Linux Enterprise Server, Suse Linux Enterprise Server threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Suse Linux Enterprise Server KEV, Suse Linux Enterprise Server exploited vulnerabilities",{"@context":125,"@type":126,"name":127,"description":122,"url":128,"manufacturer":129,"applicationCategory":133,"softwareVersion":134,"mainEntity":135},"https:\u002F\u002Fschema.org","SoftwareApplication","Suse Linux Enterprise Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fsuse_linux_enterprise_server",{"@type":130,"name":131,"url":132},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","5 versions tracked",{"@type":136,"name":137,"description":138,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Suse Linux Enterprise Server Security Vulnerabilities","Security vulnerabilities affecting Suse Linux Enterprise Server by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":140,"apiVersion":141},"2026-10-17T14:37:15.538Z","3.0",[],{"rows":144,"total":11,"capped":18,"failed":17},[145,149],{"cveId":49,"name":106,"severity":54,"cvss":52,"added":107,"epss":55,"published":146,"ranges":147,"checked":4,"hits":148,"covers":18},"2016-05-05T18:59:03.273",[27],[],{"cveId":111,"name":116,"severity":61,"cvss":114,"added":117,"epss":115,"published":150,"ranges":151,"checked":4,"hits":153,"covers":18},"2014-05-07T10:55:04.337",[152],"11-sp3",[]]