Known vulnerabilities in Basesystem Module 15-SP6 - page 142

Vendor: SUSE
Software: Basesystem Module
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:basesystem_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3995
Public exploits: 64
Known exploited (KEV): 19
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Basesystem Module version 15-SP6 Basesystem Module 15-SP6 is affected by 3995 vulnerabilities: 13 critical, 158 high, 311 medium, 3512 low Critical High Medium Low

Vulnerabilities (3995)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616		 CWE-337 Medium
No
No
 - 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU101654 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11053		 CWE-200 Low
No
No
 - 11.12.2024 SB2024121137
SB2024121189
SB2024121190
and 32 more
#VU101234 - Incorrect Calculation
CVE-2024-53138		 CWE-682 Low
No
No
 - 04.12.2024 SB2024120467
SB2024121502
SB2024121504
and 44 more
#VU101099 - Missing release of memory after effective lifetime
CVE-2024-53121		 CWE-401 Low
No
No
 - 03.12.2024 SB2024120306
SB2024121502
SB2024121504
and 43 more
#VU101061 - Use of Externally-Controlled Format String
 CWE-134 Low
No
No
 - 30.11.2024 SB2024113004
SB2024113005
SB2024113006
#VU100995 - Memory corruption
CVE-2024-52531		 CWE-119 Low
No
No
 - 27.11.2024 SB2024111329
SB2024112738
SB2024112739
and 35 more
#VU100751 - Improper input validation
CVE-2024-11596		 CWE-20 Medium
No
No
 - 21.11.2024 SB2024112101
SB2024112221
SB2024112222
and 6 more
#VU100750 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11595		 CWE-835 Medium
No
No
 - 20.11.2024 SB2024112101
SB2024112221
SB2024112222
and 2 more
#VU100669 - Improper input validation
CVE-2024-44308		 CWE-20 Critical
No
Exploited
 - 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309		 CWE-79 High
No
Exploited
 - 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more
#VU100566 - Off-by-one Error
CVE-2024-52533		 CWE-193 High
No
No
 - 15.11.2024 SB20241115147
SB20241115148
SB20241115149
and 71 more
#VU100516 - Improper input validation
CVE-2024-11168		 CWE-20 Medium
No
No
 - 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 - 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 - 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU100327 - Missing release of memory after effective lifetime
CVE-2024-45819		 CWE-401 Medium
No
No
 - 12.11.2024 SB20241112120
SB20241112131
SB2024111303
and 11 more
#VU100325 - Improper Locking
CVE-2024-45818		 CWE-667 Medium
No
No
 - 12.11.2024 SB20241112118
SB20241112131
SB2024111303
and 12 more
#VU100247 - Improper input validation
CVE-2024-10524		 CWE-20 Medium
No
No
 - 12.11.2024 SB2024111268
SB2024111269
SB2024120382
and 7 more
#VU100095 - Memory corruption
CVE-2024-47072		 CWE-119 Medium
No
No
 - 07.11.2024 SB20241107102
SB20241115126
SB2024112531
and 36 more
#VU98946 - NULL Pointer Dereference
CVE-2024-49987		 CWE-476 Low
No
No
 - 22.10.2024 SB2024102258
SB20241203101
SB2024121502
and 22 more
#VU96619 - Permissions, Privileges, and Access Controls
CVE-2023-31315		 CWE-264 Low
No
No
 - 29.08.2024 SB2024082927
SB2024082928
SB2024082929
and 23 more


Showing elements 2821 - 2840 out of 3995