[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffWDOus7hPkNQa6LrdB3FJ1lUhQMqQ3e8xFgxJ6l7nlc":3,"g5a-family:suse\u002Flinux_enterprise_workstation_extension":166,"g5a-ex:suse\u002Flinux_enterprise_workstation_extension@*":167},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":82,"seoMetadata":144,"meta":163},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"suse","linux_enterprise_workstation_extension",2,104,13,"2022-01-28",[14,16],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},"12",{"version":17,"cve_count":18,"kev_count":18,"has_kev":19},"15",0,false,"Linux Enterprise Workstation Extension by Suse is a technology product with 2 tracked versions and 104 known security vulnerabilities including 13 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},{"version":17,"cve_count":18,"kev_count":18,"has_kev":19},[25,33,38,43,49,54,62,67,71,76],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":32},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",9.8,"v3.1","Critical",0.99812,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":37},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.98618,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":42},"CVE-2015-0313","Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2015, a different vulnerability than CVE-2015-0315, CVE-2015-0320, and CVE-2015-0322.","2015-02-02",0.95266,{"cveId":44,"description":45,"publishedDate":12,"cvssScore":46,"cvssVersion":30,"severity":47,"isKev":4,"epssScore":48},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.",7.8,"High",0.94921,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":53},"CVE-2016-4117","Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.","2016-05-11",0.94354,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":19,"epssScore":61},"CVE-2014-0221","The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.","2014-06-05",4.3,"v2","Medium",0.87892,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":66},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.","2015-07-14",0.87033,{"cveId":68,"description":69,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":19,"epssScore":70},"CVE-2014-3470","The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.",0.85784,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":4,"epssScore":75},"CVE-2015-0311","Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in January 2015.","2015-01-23",0.85589,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":30,"severity":60,"isKev":4,"epssScore":81},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,0.7565,[83,88,98,102,105,110,113,115,122,130,132,134,141],{"cveId":44,"description":45,"publishedDate":12,"cvssScore":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":84,"cisaDateAdded":85,"cisaShortDescription":86,"cisaRequiredAction":87},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"severity":47,"isKev":4,"epssScore":93,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",8.8,0.67698,"Adobe Flash Player Integer Overflow Vulnerability","2022-05-25","Integer overflow in Adobe Flash Player allows attackers to execute code.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"severity":31,"isKev":4,"epssScore":32,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":97},"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","2022-04-13","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":63,"description":64,"publishedDate":65,"cvssScore":29,"severity":31,"isKev":4,"epssScore":66,"cisaVulnName":103,"cisaDateAdded":100,"cisaShortDescription":104,"cisaRequiredAction":97},"Adobe Flash Player Use-After-Free Vulnerability","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":106,"description":107,"publishedDate":65,"cvssScore":29,"severity":31,"isKev":4,"epssScore":108,"cisaVulnName":103,"cisaDateAdded":100,"cisaShortDescription":109,"cisaRequiredAction":97},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.",0.1883,"Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":72,"description":73,"publishedDate":74,"cvssScore":29,"severity":31,"isKev":4,"epssScore":75,"cisaVulnName":111,"cisaDateAdded":100,"cisaShortDescription":112,"cisaRequiredAction":97},"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":39,"description":40,"publishedDate":41,"cvssScore":29,"severity":31,"isKev":4,"epssScore":42,"cisaVulnName":103,"cisaDateAdded":100,"cisaShortDescription":114,"cisaRequiredAction":97},"Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":116,"description":117,"publishedDate":118,"cvssScore":29,"severity":31,"isKev":4,"epssScore":119,"cisaVulnName":111,"cisaDateAdded":120,"cisaShortDescription":121,"cisaRequiredAction":97},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.20055,"2022-03-25","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":123,"description":124,"publishedDate":125,"cvssScore":46,"severity":47,"isKev":4,"epssScore":126,"cisaVulnName":127,"cisaDateAdded":128,"cisaShortDescription":129,"cisaRequiredAction":97},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player Arbitrary Code Execution Vulnerability","2022-03-03","Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":50,"description":51,"publishedDate":52,"cvssScore":29,"severity":31,"isKev":4,"epssScore":53,"cisaVulnName":127,"cisaDateAdded":128,"cisaShortDescription":131,"cisaRequiredAction":97},"An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":34,"description":35,"publishedDate":36,"cvssScore":29,"severity":31,"isKev":4,"epssScore":37,"cisaVulnName":103,"cisaDateAdded":128,"cisaShortDescription":133,"cisaRequiredAction":97},"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":135,"description":136,"publishedDate":79,"cvssScore":80,"severity":60,"isKev":4,"epssScore":137,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":87},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"severity":60,"isKev":4,"epssScore":81,"cisaVulnName":142,"cisaDateAdded":139,"cisaShortDescription":143,"cisaRequiredAction":87},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":145,"metaDescription":146,"keywords":147,"structuredData":148},"Linux Enterprise Workstation Extension by Suse - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Linux Enterprise Workstation Extension by Suse covering 2 versions with 104 tracked vulnerabilities including 8 critical and 3 high-severity issues and 13 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Linux Enterprise Workstation Extension vulnerabilities, Linux Enterprise Workstation Extension security, Linux Enterprise Workstation Extension CVE, Suse Linux Enterprise Workstation Extension, Linux Enterprise Workstation Extension threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Linux Enterprise Workstation Extension KEV, Linux Enterprise Workstation Extension exploited vulnerabilities",{"@context":149,"@type":150,"name":151,"description":146,"url":152,"manufacturer":153,"applicationCategory":157,"softwareVersion":158,"mainEntity":159},"https:\u002F\u002Fschema.org","SoftwareApplication","Linux Enterprise Workstation Extension","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Flinux_enterprise_workstation_extension",{"@type":154,"name":155,"url":156},"Organization","Suse","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsuse","Security Software","2 versions tracked",{"@type":160,"name":161,"description":162,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Linux Enterprise Workstation Extension Security Vulnerabilities","Security vulnerabilities affecting Linux Enterprise Workstation Extension by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":164,"apiVersion":165},"2026-10-28T15:55:33.322Z","3.0",[],{"rows":168,"total":11,"capped":19,"failed":18},[169,174,179,183,187,191,195,199,203,207,211,215,219],{"cveId":44,"name":84,"severity":47,"cvss":46,"added":85,"epss":48,"published":170,"ranges":171,"checked":4,"hits":173,"covers":19},"2022-01-28T20:15:12.193",[172],"12-sp5",[],{"cveId":89,"name":94,"severity":47,"cvss":92,"added":95,"epss":93,"published":175,"ranges":176,"checked":4,"hits":178,"covers":19},"2015-12-28T23:59:19.05",[15,177],"12-sp1",[],{"cveId":26,"name":99,"severity":31,"cvss":29,"added":100,"epss":32,"published":180,"ranges":181,"checked":4,"hits":182,"covers":19},"2015-06-23T21:59:01.96",[15],[],{"cveId":63,"name":103,"severity":31,"cvss":29,"added":100,"epss":66,"published":184,"ranges":185,"checked":4,"hits":186,"covers":19},"2015-07-14T10:59:00.213",[15],[],{"cveId":106,"name":103,"severity":31,"cvss":29,"added":100,"epss":108,"published":188,"ranges":189,"checked":4,"hits":190,"covers":19},"2015-07-14T10:59:01.337",[15],[],{"cveId":72,"name":111,"severity":31,"cvss":29,"added":100,"epss":75,"published":192,"ranges":193,"checked":4,"hits":194,"covers":19},"2015-01-23T21:59:04.897",[15],[],{"cveId":39,"name":103,"severity":31,"cvss":29,"added":100,"epss":42,"published":196,"ranges":197,"checked":4,"hits":198,"covers":19},"2015-02-02T19:59:00.053",[15],[],{"cveId":116,"name":111,"severity":31,"cvss":29,"added":120,"epss":119,"published":200,"ranges":201,"checked":4,"hits":202,"covers":19},"2016-06-16T14:59:51.017",[15,177],[],{"cveId":123,"name":127,"severity":47,"cvss":46,"added":128,"epss":126,"published":204,"ranges":205,"checked":4,"hits":206,"covers":19},"2015-10-15T10:59:10.53",[15],[],{"cveId":50,"name":127,"severity":31,"cvss":29,"added":128,"epss":53,"published":208,"ranges":209,"checked":4,"hits":210,"covers":19},"2016-05-11T01:59:46.137",[15,177],[],{"cveId":34,"name":103,"severity":31,"cvss":29,"added":128,"epss":37,"published":212,"ranges":213,"checked":4,"hits":214,"covers":19},"2015-07-08T14:59:05.677",[15],[],{"cveId":135,"name":138,"severity":60,"cvss":80,"added":139,"epss":137,"published":216,"ranges":217,"checked":4,"hits":218,"covers":19},"2016-05-05T18:59:04.727",[15,177],[],{"cveId":77,"name":142,"severity":60,"cvss":80,"added":139,"epss":81,"published":220,"ranges":221,"checked":4,"hits":222,"covers":19},"2016-05-05T18:59:08.96",[15,177],[]]