Vendor
SUSE
1,322 known vulnerabilities in products by SUSE, 50 of them actively exploited (CISA KEV).
Key figures
1,322
Vulnerabilities
50
Actively exploited (KEV)
5
Used by ransomware
143
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2013-2465 | Oracle Java SE Unspecified Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2012-0507 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2016-4117 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 9.8 | |
| Critical | CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2015-7645 | Adobe Flash Player Arbitrary Code Execution Vulnerability In CISA KEVRansomware | 7.8 | |
| Critical | CVE-2025-32463 | Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability In CISA KEV | 9.3 | |
| Critical | CVE-2015-3306 | ProFTPD Improper Access Control Vulnerability In CISA KEV | 10.0 | |
| Critical | CVE-2014-6271 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2012-1823 | PHP-CGI Query String Parameter Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-7169 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2014-0497 | Adobe Flash Player Integer Underflow Vulnerablity In CISA KEV | 9.8 | |
| Critical | CVE-2015-3113 | Adobe Flash Player Heap-Based Buffer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5119 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2011-3544 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-0313 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5122 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-3427 | Oracle Java SE and JRockit Unspecified Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2012-5076 | Oracle Java SE Sandbox Bypass Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-0311 | Adobe Flash Player Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2013-2729 | Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-2590 | Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2016-4171 | Adobe Flash Player Remote Code Execution Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2015-5123 | Adobe Flash Player Use-After-Free Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2011-0611 | Adobe Flash Player Remote Code Execution Vulnerability In CISA KEV | 8.8 | |
| Critical | CVE-2009-3953 | Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability In CISA KEV | 8.8 |
News
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agenciesthehackernews,
- 58 hardware vulnerabilities: A guide to the threatscsoonline,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,