Known vulnerabilities in Basesystem Module 15-SP7 - page 3

Vendor: SUSE
Software: Basesystem Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:basesystem_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3862
Public exploits: 61
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Basesystem Module version 15-SP7 Basesystem Module 15-SP7 is affected by 3862 vulnerabilities: 9 critical, 141 high, 568 medium, 3143 low Critical High Medium Low

Vulnerabilities (3862)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26032		 CWE-22 Low
No
No
 - 24.08.2026 SB20260824105
SB20260824106
SB20260824119
and 1 more
#VU142296 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53783		 CWE-59 Medium
No
No
 - 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU142295 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53784		 CWE-59 Low
No
No
 - 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 2 more
#VU139392 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-73076		 CWE-94 High
No
No
 - 27.07.2026 SB2026072714
SB2026082207
SB2026082208
and 5 more
#VU139391 - Heap-based Buffer Overflow
CVE-2026-73072		 CWE-122 Medium
No
No
 - 27.07.2026 SB2026072713
SB2026082207
SB2026082208
and 5 more
#VU139389 - Use After Free
CVE-2026-73071		 CWE-416 Low
No
No
 - 27.07.2026 SB2026072711
SB2026082207
SB2026082208
and 2 more
#VU139262 - Command injection
CVE-2026-73078		 CWE-77 High
No
No
 - 24.07.2026 SB2026072423
SB2026082207
SB2026082208
and 5 more
#VU139260 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-73077		 CWE-78 Medium
No
No
 - 24.07.2026 SB2026072422
SB2026082207
SB2026082208
and 4 more
#VU139259 - Heap-based Buffer Overflow
CVE-2026-73074		 CWE-122 Low
No
No
 - 24.07.2026 SB2026072421
SB2026082207
SB2026082208
and 2 more
#VU139258 - Stack-based buffer overflow
CVE-2026-73070		 CWE-121 Low
No
No
 - 24.07.2026 SB2026072420
SB2026082207
SB2026082208
and 1 more
#VU139257 - Buffer Underwrite ('Buffer Underflow')
CVE-2026-73075		 CWE-124 Low
No
No
 - 24.07.2026 SB2026072419
SB2026082207
SB2026082208
and 1 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 13 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 24 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 - 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more


Showing elements 41 - 60 out of 3862