SUSE Linux Enterprise Server (SLES) 11 Service Pack 3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:suse:suse_linux_enterprise_server:11:sp3:*:*:*:*:*:*

part: o version: 11 update: sp3

VendorSuse (ec535637-432e-5a38-96dd-4ec1e0138f73)
ProductSuse Linux Enterprise Server (84060f20-415e-515d-a3de-5586a69d6e5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19052 vulnerable 2026-06-08 05:11:15.292160 Details available
An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.
Published: 2018-11-07T05:00:00.000Z
Updated: 2024-08-05T11:30:04.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14798 vulnerable 2026-06-08 05:08:57.459434 local privilege escalation in SUSE postgresql init script
HIGH (7.3)
A race condition in the postgresql init script could be used by attackers able to access the postgresql account to escalate their privileges to root.
Published: 2018-03-01T19:00:00.000Z
Updated: 2024-09-16T19:20:37.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5707 vulnerable 2026-06-08 05:06:50.778961 Details available
Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large iov_count value in a write request.
Published: 2015-10-19T10:00:00.000Z
Updated: 2024-08-06T06:59:04.042Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1514 vulnerable 2026-06-08 05:05:25.128252 Details available
vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.
Published: 2014-03-19T10:00:00.000Z
Updated: 2024-08-06T09:42:36.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1511 vulnerable 2026-06-08 05:05:25.125157 Details available
Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
Published: 2014-03-19T10:00:00.000Z
Updated: 2024-08-06T09:42:36.250Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1510 vulnerable 2026-06-08 05:05:25.123886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1509 vulnerable 2026-06-08 05:05:25.122809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1508 vulnerable 2026-06-08 05:05:25.121790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1505 vulnerable 2026-06-08 05:05:25.090374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1496 vulnerable 2026-06-08 05:05:25.041231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.