Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse suse enterprise storage 4 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2018-12116
Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-define...
Nodejs Node.jsSuse Suse Linux Enterprise Server 12Suse Suse Enterprise Storage 4Suse Suse Openstack Cloud 7Suse Suse Openstack Cloud 8Suse Suse Linux Enterprise Server 15
7.5
CVSSv3
CVE-2018-12122
Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.
Nodejs Node.jsSuse Suse Linux Enterprise Server 12Suse Suse Enterprise Storage 4Suse Suse Openstack Cloud 7Suse Suse Openstack Cloud 8Suse Suse Linux Enterprise Server 15
5.6
CVSSv3
CVE-2017-5753
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Atom C C2308Intel Atom C C2316Intel Atom C C2338Intel Atom C C2350Intel Atom C C2358Intel Atom C C2508Intel Atom C C2516Intel Atom C C2518Intel Atom C C2530Intel Atom C C2538Intel Atom C C2550Intel Atom C C2558Intel Atom C C2718Intel Atom C C2730Intel Atom C C2738Intel Atom C C2750Intel Atom C C2758Intel Atom C C3308Intel Atom C C3338Intel Atom C C3508Intel Atom C C3538Intel Atom C C3558
NA
CVE-2011-1585
The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel prior to 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
Linux Linux KernelSuse Suse Linux Enterprise Server 10
NA
CVE-2011-1477
Multiple array index errors in sound/oss/opl3.c in the Linux kernel prior to 2.6.39 allow local users to cause a denial of service (heap memory corruption) or possibly gain privileges by leveraging write access to /dev/sequencer.
Linux Linux KernelSuse Linux Enterprise Desktop 10
NA
CVE-2011-1163
The osf_partition function in fs/partitions/osf.c in the Linux kernel prior to 2.6.38 does not properly handle an invalid number of partitions, which might allow local users to obtain potentially sensitive information from kernel heap memory via vectors related to partition-table...
Linux Linux KernelSuse Linux Enterprise Server 10Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Server Aus 5.6Redhat Enterprise Linux Eus 5.6
7.8
CVSSv3
CVE-2008-2812
The Linux kernel prior to 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio...
Linux Linux KernelCanonical Ubuntu Linux 6.06Canonical Ubuntu Linux 7.04Canonical Ubuntu Linux 7.10Canonical Ubuntu Linux 8.04Novell Linux Desktop 9Opensuse Opensuse 11.0Opensuse Opensuse 10.3Suse Suse Linux Enterprise Server 10Suse Suse Linux Enterprise Desktop 10Debian Debian Linux 4.0Avaya Message Networking 3.1Avaya Sip Enablement Services 4.0Avaya Messaging Storage Server 4.0Avaya Proactive Contact 4.0Avaya Meeting Exchange 5.0Avaya Expanded Meet-me ConferencingAvaya Intuity Audix Lx 2.0Avaya Sip Enablement Services -Avaya Communication Manager
NA
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 up to and including 2.429-rc2 and 2.6 up to and including 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
Avaya Network RoutingAvaya Converged Communications Server 2.0Linux Linux Kernel 2.4.0Linux Linux Kernel 2.4.15Linux Linux Kernel 2.4.16Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.19Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.22Linux Linux Kernel 2.4.26Linux Linux Kernel 2.4.27Linux Linux Kernel 2.4.3Linux Linux Kernel 2.4.4Linux Linux Kernel 2.6.0Avaya Mn100Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Linux Linux Kernel 2.6.8Mandrakesoft Mandrake Linux 10.1Mandrakesoft Mandrake Linux 9.2Redhat Enterprise Linux 4.0Redhat Linux 7.3
NA
CVE-2004-0554
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" progr...
Linux Linux Kernel 2.4.18Linux Linux Kernel 2.4.19Linux Linux Kernel 2.6.1Linux Linux Kernel 2.6.6Linux Linux Kernel 2.6.7Redhat Enterprise Linux 3.0Suse Suse Linux 7Suse Suse Linux 9.1Avaya Converged Communications Server 2.0Linux Linux Kernel 2.4.23Linux Linux Kernel 2.4.24Linux Linux Kernel 2.6.3Linux Linux Kernel 2.6.4Redhat Enterprise Linux 2.1Suse Suse Linux 8.1Suse Suse Linux 8.2Suse Suse Linux 8Linux Linux Kernel 2.4.21Linux Linux Kernel 2.4.22Linux Linux Kernel 2.6.2Suse Suse Linux 8.0Avaya Modular Messaging Message Storage Server S3400
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook