Known vulnerabilities in Basesystem Module 15-SP5

Vendor: SUSE
Software: Basesystem Module
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:basesystem_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3146
Public exploits: 53
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Basesystem Module version 15-SP5 Basesystem Module 15-SP5 is affected by 3146 vulnerabilities: 14 critical, 138 high, 343 medium, 2651 low Critical High Medium Low

Vulnerabilities (3146)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU101964 - Resource Management Errors
CVE-2024-26328		 CWE-399 Medium
No
No
 - 27.12.2024 SB2024122757
SB2024122903
SB2025021859
and 2 more
#VU101942 - Incorrect Default Permissions
CVE-2024-21820		 CWE-276 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 11 more
#VU101941 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-23918		 CWE-754 Low
No
No
 - 27.12.2024 SB2024122731
SB2024122734
SB2024122735
and 14 more
#VU101936 - Improper Finite State Machines (FSMs) in Hardware Logic
CVE-2024-21853		 CWE-1245 Low
No
No
 - 27.12.2024 SB2024122729
SB2024122734
SB2024122735
and 14 more
#VU101898 - Resource exhaustion
CVE-2024-43806		 CWE-400 Medium
No
No
 - 23.12.2024 SB2024122311
SB2024122733
SB2025121873
#VU101890 - Exposed Dangerous Method or Function
CVE-2024-53920		 CWE-749 High
No
No
 - 20.12.2024 SB2024122058
SB2024122059
SB20250226597
and 21 more
#VU101889 - Improper input validation
CVE-2024-11407		 CWE-20 Medium
No
No
 - 20.12.2024 SB2024122036
SB2024122046
SB2024122057
and 10 more
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616		 CWE-337 Medium
No
No
 - 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 - 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU101363 - Improper input validation
CVE-2024-46901		 CWE-20 Medium
No
No
 - 09.12.2024 SB2024120959
SB2024121264
SB2024121357
and 6 more
#VU100251 - Memory corruption
CVE-2024-26327		 CWE-119 Low
No
No
 - 12.11.2024 SB2024111273
SB2024111275
SB2024122903
and 3 more
#VU96644 - Improper input validation
CVE-2024-7246		 CWE-20 Medium
No
No
 - 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more
#VU92336 - NULL Pointer Dereference
CVE-2021-47594		 CWE-476 Low
No
No
 - 20.06.2024 SB2024062056
SB2024121505
SB2024121752
and 1 more
#VU88538 - Integer underflow
CVE-2024-24474		 CWE-191 Low
No
No
 - 15.04.2024 SB2024041550
SB2024041552
SB2024041553
and 4 more
#VU87161 - Stack-based buffer overflow
CVE-2023-6693		 CWE-121 Low
No
No
 - 06.03.2024 SB2024030635
SB2024030637
SB2024032249
and 9 more
#VU85831 - Out-of-bounds read
CVE-2023-1544		 CWE-125 Low
No
No
 - 26.01.2024 SB2024012622
SB2024012627
SB2023120193
and 10 more


Showing elements 1 - 20 out of 3146