Suse Manager

6 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-4957 HIGH PATCH Act Now

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 59.1%.

Denial Of Service Null Pointer Dereference Ntp Solaris Manager Proxy +6

NVD

CVSS 3.1

7.5

EPSS

59.1%

CVE-2016-4956 MEDIUM This Month

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Ntp Solaris Manager Proxy Openstack Cloud +6

NVD

CVSS 3.1

5.3

EPSS

1.4%

CVE-2016-4955 MEDIUM PATCH This Month

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Race Condition Denial Of Service Ntp Solaris Manager Proxy +7

NVD

CVSS 3.1

5.9

EPSS

1.7%

CVE-2016-0376 HIGH This Week

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

IBM RCE Java Suse Linux Enterprise Software Development Kit Suse Linux Enterprise Module For Legacy Software +11

NVD

CVSS 3.0

8.1

EPSS

1.5%

CVE-2016-0363 HIGH This Week

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

IBM Java Authentication Bypass Satellite Enterprise Linux Desktop +11

NVD

CVSS 3.0

8.1

EPSS

0.5%

CVE-2012-0414 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS Suse Manager

NVD

CVSS 2.0

4.3

EPSS

1.1%

CVE-2016-4957

EPSS 59% CVSS 7.5

HIGH PATCH Act Now

Denial Of Service Null Pointer Dereference Ntp +8

NVD

CVE-2016-4956

EPSS 1% CVSS 5.3

MEDIUM This Month

Denial Of Service Ntp Solaris +8

NVD

CVE-2016-4955

EPSS 2% CVSS 5.9

MEDIUM PATCH This Month

Race Condition Denial Of Service Ntp +9

NVD

CVE-2016-0376

EPSS 2% CVSS 8.1

HIGH This Week

IBM RCE Java +13

NVD

CVE-2016-0363

EPSS 1% CVSS 8.1

HIGH This Week

IBM Java Authentication Bypass +13

NVD

CVE-2012-0414

EPSS 1% CVSS 4.3

MEDIUM This Month

XSS Suse Manager

NVD