Known vulnerabilities in Basesystem Module 15-SP4 - page 18

Vendor: SUSE
Software: Basesystem Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:basesystem_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 629
Public exploits: 34
Known exploited (KEV): 17
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Basesystem Module version 15-SP4 Basesystem Module 15-SP4 is affected by 629 vulnerabilities: 12 critical, 98 high, 212 medium, 307 low Critical High Medium Low

Vulnerabilities (629)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78756 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-38633		 CWE-22 Medium
No
No
 - 28.07.2023 SB2023072832
SB2023072902
SB2023080153
and 13 more
#VU78697 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-38197		 CWE-835 Medium
No
No
 - 26.07.2023 SB2023072654
SB2023072656
SB2023072657
and 31 more
#VU78696 - Improper Certificate Validation
CVE-2023-34410		 CWE-295 Medium
No
No
 - 26.07.2023 SB2023072654
SB2023072656
SB2023072657
and 28 more
#VU78667 - Out-of-bounds write
CVE-2021-45930		 CWE-787 Low
No
No
 - 25.07.2023 SB2022010102
SB2023072568
SB2023072625
and 15 more
#VU78572 - Use After Free
CVE-2023-20593		 CWE-416 Low
No
No
 - 24.07.2023 SB2023072428
SB2023072429
SB2023072553
and 134 more
#VU78540 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-32001		 CWE-367 Low
No
No
 - 21.07.2023 SB2023072135
SB2023072137
SB2023072138
and 17 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 - 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 - 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Public exploit available
No
 - 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU78412 - Improper input validation
CVE-2023-22044		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 30 more
#VU78413 - Improper input validation
CVE-2023-22045		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 155 more
#VU78414 - Improper input validation
CVE-2023-22049		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071985
SB2023071986
SB2023071987
and 164 more
#VU78265 - Improper Authentication
CVE-2023-2975		 CWE-287 Low
No
No
 - 15.07.2023 SB2023071506
SB2023072844
SB2023072846
and 37 more
#VU77164 - Exposure of sensitive information to an unauthorized actor
CVE-2023-32681		 CWE-200 Medium
Public exploit available
No
 - 12.06.2023 SB2023061224
SB2023061306
SB2023061514
and 114 more
#VU76668 - Memory corruption
CVE-2023-32763		 CWE-119 High
No
No
 - 30.05.2023 SB2023053068
SB2023070436
SB2023071741
and 17 more
#VU76667 - Out-of-bounds read
CVE-2023-33285		 CWE-125 Medium
No
No
 - 30.05.2023 SB2023053067
SB2023072656
SB2023072657
and 17 more
#VU76666 - Cleartext Transmission of Sensitive Information
CVE-2023-32762		 CWE-319 Medium
No
No
 - 30.05.2023 SB2023053067
SB2023072656
SB2023072905
and 16 more
#VU76665 - Divide By Zero
CVE-2023-32573		 CWE-369 Medium
No
No
 - 30.05.2023 SB2023053067
SB2023072568
SB2023072625
and 28 more
#VU74061 - Improper input validation
CVE-2023-24607		 CWE-20 Medium
No
No
 - 27.03.2023 SB2023032752
SB2023032757
SB2023072656
and 13 more
#VU72699 - Type confusion
CVE-2023-1077		 CWE-843 Low
No
No
 - 01.03.2023 SB2023030153
SB2023042440
SB2023061704
and 67 more


Showing elements 341 - 360 out of 629