Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

suse linux enterprise server 10 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2009-2472
Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a "cross origin...
Mozilla FirefoxFedoraproject Fedora 10Suse Linux Enterprise Debuginfo 10Suse Linux Enterprise Debuginfo 11Opensuse Opensuse 11.0Opensuse Opensuse 11.1Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11
NA
CVE-2010-4160
Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service...
Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10
NA
CVE-2010-4157
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call....
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
NA
CVE-2010-2301
Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element. NOTE: this might...
Google ChromeOpensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Suse Linux Enterprise Desktop 10Suse Suse Linux Enterprise Desktop 11Suse Suse Linux Enterprise Server 10Suse Suse Linux Enterprise Server 11
NA
CVE-2011-3659
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vectors related to incorrect AttributeChildRemoved notifications...
Mozilla FirefoxMozilla SeamonkeyMozilla ThunderbirdOpensuse Opensuse 11.4Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Software Development Kit 11
NA
CVE-2010-4164
Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C,...
Linux Linux KernelSuse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11Debian Debian Linux 5.0
NA
CVE-2010-4073
The ipc subsystem in the Linux kernel before 2.6.37-rc1 does not initialize certain structures, which allows local users to obtain potentially sensitive information from kernel stack memory via vectors related to the (1) compat_sys_semctl, (2) compat_sys_msgctl, and (3)...
Linux Linux KernelOpensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Debian Debian Linux 5.0
NA
CVE-2006-6662
Unspecified vulnerability in Linux User Management (novell-lum) on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password....
Suse Suse Open Enterprise Server 9Suse Linux Enterprise Desktop 10Suse Suse Linux 10
NA
CVE-2010-4083
The copy_semid_to_user function in ipc/sem.c in the Linux kernel before 2.6.36 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory via a (1) IPC_INFO, (2) SEM_INFO, (3) IPC_STAT, or (4) SEM_STAT...
Linux Linux KernelOpensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Real Time Extension 11Suse Linux Enterprise Server 9Suse Linux Enterprise Server 10Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 10Debian Debian Linux 5.0
NA
CVE-2010-4258
The do_exit function in kernel/exit.c in the Linux kernel before 2.6.36.2 does not properly handle a KERNEL_DS get_fs value, which allows local users to bypass intended access_ok restrictions, overwrite arbitrary kernel memory locations, and gain privileges by leveraging a (1)...
Linux Linux KernelFedoraproject Fedora 13Suse Linux Enterprise Server 10Suse Linux Enterprise Desktop 11Suse Linux Enterprise Server 11Suse Linux Enterprise Server 9Opensuse Opensuse 11.2Opensuse Opensuse 11.3Suse Linux Enterprise Desktop 10Suse Linux Enterprise Software Development Kit 10Suse Linux Enterprise Real Time Extension 11
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
elevation of privilegeCVE-2022-42331CVE-2023-24709CVE-2023-27569open redirectinjectionCVE-2023-27087
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook