Known vulnerabilities in openSUSE Leap Micro - page 100

Vendor: SUSE
Software: openSUSE Leap Micro
Software CPE: cpe:2.3:o:suse:opensuse_leap_micro:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2715
Public exploits: 50
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap Micro openSUSE Leap Micro is affected by 2715 known vulnerabilities: 1 critical, 115 high, 291 medium, 2308 low Critical High Medium Low

Vulnerabilities (2715)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87616 - Improper Privilege Management
CVE-2024-1753		 CWE-269 High
No
No
 - 19.03.2024 SB2024031925
SB2024032051
SB2024032613
and 41 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 - 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU86768 - Improper Authentication
CVE-2023-52160		 CWE-287 Medium
Available
No
 - 23.02.2024 SB2024022343
SB2024022345
SB2024022346
and 11 more
#VU86755 - Out-of-bounds write
CVE-2023-52356		 CWE-787 High
No
No
 - 23.02.2024 SB2024022315
SB2024022316
SB2024022317
and 35 more
#VU86052 - Use After Free
CVE-2024-25062		 CWE-416 High
No
No
 - 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU86038 - Incorrect Authorization
CVE-2024-23653		 CWE-863 High
Available
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 23 more
#VU86037 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-23652		 CWE-22 Medium
No
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU86035 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-23651		 CWE-362 Medium
No
No
 - 02.02.2024 SB2024020229
SB2024020743
SB2024022237
and 20 more
#VU85764 - Improper Authentication
CVE-2023-42465		 CWE-287 Low
No
No
 - 24.01.2024 SB2024012432
SB2024012434
SB2024012435
and 32 more
#VU85624 - Reachable Assertion
CVE-2024-0567		 CWE-617 Medium
No
No
 - 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 34 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 - 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 - 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU79308 - Reachable Assertion
CVE-2023-38471		 CWE-617 Low
No
No
 - 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU79306 - Reachable Assertion
CVE-2023-38469		 CWE-617 Medium
No
No
 - 09.08.2023 SB2023080944
SB2023080945
SB2023112057
and 31 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 - 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78576 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34968		 CWE-200 Low
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 27 more
#VU78575 - Type confusion
CVE-2023-34967		 CWE-843 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 32 more
#VU78574 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-34966		 CWE-835 Medium
No
No
 - 24.07.2023 SB2023072431
SB2023072432
SB2023072437
and 35 more


Showing elements 1981 - 2000 out of 2715