Known vulnerabilities in Containers Module 15-SP4

Vendor: SUSE
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:containers_module:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Containers Module version 15-SP4 Containers Module 15-SP4 is affected by 31 vulnerabilities: 3 high, 17 medium, 11 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86038 - Incorrect Authorization
CVE-2024-23653
CWE-863 High
Public exploit available
No
- 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652
CWE-22 Medium
No
No
- 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU86035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23651
CWE-362 Medium
No
No
- 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU85991 - Security Features
CVE-2024-21626
CWE-254 High
Public exploit available
No
- 01.02.2024 SB2024020112
SB2024020113
SB2024020123
and 78 more
#VU77526 - Permissions, Privileges, and Access Controls
CVE-2023-2728
CWE-264 Medium
Public exploit available
No
- 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU77525 - Permissions, Privileges, and Access Controls
CVE-2023-2727
CWE-264 Medium
No
No
- 19.06.2023 SB2023061947
SB2023061950
SB2023061951
and 15 more
#VU76474 - Improper input validation
CVE-2022-3294
CWE-20 Medium
No
No
- 24.05.2023 SB2023052426
SB2023052522
SB2023070826
and 7 more
#VU75993 - Resource Management Errors
CVE-2023-2253
CWE-399 Medium
No
No
- 10.05.2023 SB2023051039
SB2023051040
SB2023051041
and 22 more
#VU74469 - Unprotected Alternate Channel
CVE-2023-28842
CWE-420 Medium
No
No
- 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 19 more
#VU74468 - Unprotected Alternate Channel
CVE-2023-28840
CWE-420 Medium
No
No
- 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 20 more
#VU74467 - Missing Encryption of Sensitive Data
CVE-2023-28841
CWE-311 Medium
No
No
- 05.04.2023 SB2023040505
SB2023062140
SB2023080920
and 18 more
#VU74193 - Improper preservation of permissions
CVE-2023-28642
CWE-281 Medium
No
No
- 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 29 more
#VU74190 - Improper Access Control
CVE-2023-27561
CWE-284 Low
No
No
- 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU72320 - Improper Privilege Management
CVE-2023-25173
CWE-269 Low
No
No
- 16.02.2023 SB2023021620
SB2023050808
SB2023051069
and 52 more
#VU71640 - Permissions, Privileges, and Access Controls
CVE-2021-25749
CWE-264 Low
No
No
- 30.01.2023 SB2023013031
SB2023013032
SB2023052522
#VU71364 - Improper Access Control
CVE-2022-3162
CWE-284 Low
No
No
- 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more
#VU66447 - Overly Permissive Cross-domain Whitelist
CVE-2022-1996
CWE-942 Low
No
No
- 12.08.2022 SB2022081216
SB2022081228
SB2022081229
and 65 more
#VU48373 - Exposure of sensitive information to an unauthorized actor
CVE-2020-12912
CWE-200 Low
No
No
- 11.11.2020 SB2020111118
SB2023120115
SB2023121950
and 4 more
#VU48372 - Observable Response Discrepancy
CVE-2020-8695
CWE-204 Low
No
No
- 11.11.2020 SB2020111117
SB2020112423
SB2020112424
and 35 more
#VU48371 - Improper Access Control
CVE-2020-8694
CWE-284 Low
No
No
- 11.11.2020 SB2020111117
SB2023120115
SB2023121950
and 9 more


Showing elements 1 - 20 out of 31