CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (Oct 29, 2026, 9:23 AM ET)

What this means for you

This week: 3,093 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 3,093; Show in the list
Critical, last 7 days: 233; Show in the list
Healthcare-tagged, last 7 days: 10; Show in the list
Known exploited (CISA KEV): 1,762; Show in the list

Showing CVEs that name the product suse:linux_enterprise_server. Show all products

28 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2010-3904 Known exploited	High 7.8	The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u… Assigned by canonical	Dec 6, 2010
CVE-2011-3544 Known exploited	Critical 9.8	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java… Assigned by oracle	Oct 19, 2011
CVE-2012-1823 Known exploited	Critical 9.8	sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which al… Assigned by certcc	May 11, 2012
CVE-2012-0507 Known exploited	Critical 9.8	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to a… Assigned by oracle	Jun 7, 2012
CVE-2013-2465 Known exploited	Critical 9.8	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remo… Assigned by oracle	Jun 18, 2013
CVE-2013-1690 Known exploited	High 8.8	Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with pag… Assigned by mozilla	Jun 25, 2013
CVE-2014-3153 Known exploited	High 7.8	The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafte… Assigned by Chrome	Jun 7, 2014
CVE-2014-6271 Known exploited	Critical 9.8	GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, a… Assigned by debian	Sep 24, 2014
CVE-2014-7169 Known exploited	Critical 9.8	GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or poss… Assigned by mitre	Sep 24, 2014
CVE-2015-3306 Known exploited	Critical 10.0	The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Assigned by mitre	May 18, 2015

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.