Suse linux enterprise module for additional packagehub

This hub aggregates every CVE we track for Suse linux enterprise module for additional packagehub, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Suse linux enterprise module for additional packagehub.

• CVE-2025-3034Memory safety bugs fixed in Firefox 137 and Thunderbird 1378.1Apr 1, 2025
• CVE-2025-3032Leaking file descriptors from the fork server7.4Apr 1, 2025
• CVE-2020-23804Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.89.0 allows remote attackers to cause a denial of service via crafted input.7.5Aug 22, 2023
• CVE-2020-36024An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf file to FoFiType1C::convertToType1 function.5.5Aug 11, 2023
• CVE-2023-37202Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects...8.8Jul 5, 2023
• CVE-2023-37201An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.8.8Jul 5, 2023
• CVE-2022-36315When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vuln...4.3Dec 22, 2022
• CVE-2022-36316When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability...6.1Dec 22, 2022
• CVE-2022-36319When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91...7.5Dec 22, 2022
• CVE-2022-36318When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird...5.3Dec 22, 2022
• CVE-2022-36314When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the operating system.<br>This bug only affects ...5.5Dec 22, 2022
• CVE-2020-2659Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficu...3.7Jan 15, 2020
• CVE-2020-2654Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability ...3.7Jan 15, 2020
• CVE-2019-14859A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accept...9.1Jan 2, 2020
• CVE-2019-11050Use-after-free in exif parsing under memory sanitizer4.8Dec 23, 2019