Known vulnerabilities in Basesystem Module - page 131

Vendor: SUSE
Software: Basesystem Module
Software CPE: cpe:2.3:o:suse:basesystem_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 8513
Public exploits: 132
Known exploited (KEV): 43
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Basesystem Module Basesystem Module is affected by 8513 known vulnerabilities: 28 critical, 351 high, 1058 medium, 7075 low Critical High Medium Low

Vulnerabilities (8513)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118106 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52565		 CWE-61 Low
No
No
 - 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 38 more
#VU118105 - UNIX Symbolic Link (Symlink) Following
CVE-2025-52881		 CWE-61 Low
No
No
 - 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 62 more
#VU118104 - UNIX Symbolic Link (Symlink) Following
CVE-2025-31133		 CWE-61 Low
Available
No
 - 05.11.2025 SB2025110519
SB2025110530
SB2025110545
and 34 more
#VU117942 - Stack-based buffer overflow
CVE-2024-25176		 CWE-121 High
No
No
 - 03.11.2025 SB2025110350
SB2025110351
SB2025110359
and 4 more
#VU117863 - Improper input validation
CVE-2025-40104		 CWE-20 Low
No
No
 - 31.10.2025 SB2025103131
SB2025111182
SB2025111213
and 20 more
#VU117846 - Use After Free
CVE-2025-40091		 CWE-416 Low
No
No
 - 31.10.2025 SB2025103114
SB2025111182
SB2025111860
and 6 more
#VU117724 - Use After Free
CVE-2025-40037		 CWE-416 Low
No
No
 - 28.10.2025 SB2025102892
SB2025111182
SB2025111860
and 16 more
#VU117400 - Use After Free
CVE-2025-40012		 CWE-416 Low
No
No
 - 21.10.2025 SB2025102136
SB2025111182
SB2025111860
and 4 more
#VU117260 - Use After Free
CVE-2025-39984		 CWE-416 Low
No
No
 - 15.10.2025 SB20251015107
SB2025111182
SB2025111860
and 3 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985		 CWE-158 Low
No
No
 - 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 26 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984		 CWE-78 Low
No
No
 - 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 28 more
#VU116243 - Reachable Assertion
CVE-2025-39900		 CWE-617 Low
No
No
 - 01.10.2025 SB2025100165
SB2025111182
SB2025111860
and 1 more
#VU116242 - Improper input validation
CVE-2025-39898		 CWE-20 Low
No
No
 - 01.10.2025 SB2025100164
SB2025102480
SB20251031129
and 20 more
#VU116196 - Memory corruption
CVE-2025-9900		 CWE-119 High
No
No
 - 30.09.2025 SB2025093033
SB2025093035
SB2025100921
and 50 more
#VU114359 - Missing release of memory after effective lifetime
CVE-2025-8225		 CWE-401 Low
No
No
 - 22.08.2025 SB2025040819
SB2025082206
SB2025103045
and 3 more
#VU114319 - Stack-based buffer overflow
CVE-2025-8851		 CWE-121 High
No
No
 - 21.08.2025 SB2025082104
SB2025082108
SB2025082109
and 4 more
#VU101955 - Information Exposure Through Timing Discrepancy
CVE-2024-31074		 CWE-208 Low
No
No
 - 27.12.2024 SB2024122749
SB2025110539
SB2025110540
and 1 more
#VU101954 - Observable discrepancy
CVE-2024-28885		 CWE-203 Low
No
No
 - 27.12.2024 SB2024122749
SB2025110539
SB2025110540
and 1 more
#VU101953 - Insufficient Control Flow Management
CVE-2024-33617		 CWE-691 Low
No
No
 - 27.12.2024 SB2024122749
SB2025110539
SB2025110540
and 1 more
#VU67911 - Exposure of sensitive information to an unauthorized actor
CVE-2021-42523		 CWE-200 Medium
No
No
 - 04.10.2022 SB2022100447
SB2022100448
SB2022112240
and 5 more


Showing elements 2601 - 2620 out of 8513