Veille CVE

Recherche « Suse linux enterprise workstation extension »

5 CVE

Critique 2 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Suse linux enterprise workstation extension » ✕
  1. CVE-2021-4034 7.8 Élevée Exploitée Rançongiciel

    polkit · Polkit project polkit · Redhat enterprise linux server update services for sap solutions · Redhat enterprise linux

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

  2. CVE-2016-4171 9.8 Critique Exploitée

    Adobe flash player · Redhat enterprise linux desktop · Redhat enterprise linux server · Redhat enterprise linux workstation

    Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.

  3. CVE-2016-4117 9.8 Critique Exploitée Rançongiciel

    Adobe flash player · Redhat enterprise linux desktop · Redhat enterprise linux server · Redhat enterprise linux server from rhui

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

  4. CVE-2015-8651 8.8 Élevée Exploitée

    Adobe air sdk · Adobe air sdk \& compiler · Adobe flash player · Adobe air

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

  5. CVE-2014-0160 7.5 Élevée Exploitée

    Openssl openssl · Filezilla-project filezilla server · Siemens application processing engine firmware · Siemens cp 1543-1 firmware

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.