Known vulnerabilities in openSUSE Leap Micro - page 131

Vendor: SUSE
Software: openSUSE Leap Micro
Software CPE: cpe:2.3:o:suse:opensuse_leap_micro:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2715
Public exploits: 50
Known exploited (KEV): 11
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSUSE Leap Micro openSUSE Leap Micro is affected by 2715 known vulnerabilities: 1 critical, 115 high, 291 medium, 2308 low Critical High Medium Low

Vulnerabilities (2715)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73108 - Covert Timing Channel
CVE-2020-25658		 CWE-385 Low
No
No
 - 07.03.2023 SB2020111232
SB2023030749
SB2022111045
and 7 more
#VU69291 - Incorrect Authorization
CVE-2022-2990		 CWE-863 Low
No
No
 - 14.11.2022 SB2022111431
SB2022111435
SB2022111439
and 14 more
#VU69176 - Out-of-bounds write
CVE-2022-44638		 CWE-787 High
No
No
 - 09.11.2022 SB2022110943
SB2022110944
SB2022111201
and 37 more
#VU68973 - Out-of-bounds write
CVE-2022-43995		 CWE-787 Low
No
No
 - 05.11.2022 SB2022110501
SB2022110502
SB2022110729
and 17 more
#VU68858 - Off-by-one Error
CVE-2021-46848		 CWE-193 Medium
No
No
 - 31.10.2022 SB2022103141
SB2022103142
SB2022103143
and 84 more
#VU68829 - Resource Management Errors
CVE-2022-40304		 CWE-399 Medium
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 90 more
#VU68828 - Integer overflow
CVE-2022-40303		 CWE-190 High
No
No
 - 30.10.2022 SB2022103005
SB2022103006
SB2022103007
and 88 more
#VU68718 - Use After Free
CVE-2022-43680		 CWE-416 Medium
No
No
 - 25.10.2022 SB2022102560
SB2022102566
SB2022103010
and 99 more
#VU67911 - Exposure of sensitive information to an unauthorized actor
CVE-2021-42523		 CWE-200 Medium
No
No
 - 04.10.2022 SB2022100447
SB2022100448
SB2022112240
and 5 more
#VU67511 - Use After Free
CVE-2020-27784		 CWE-416 Low
No
No
 - 20.09.2022 SB2022092043
SB2022092046
SB2022092823
and 5 more
#VU67271 - Incorrect Default Permissions
CVE-2022-32743		 CWE-276 Medium
No
No
 - 13.09.2022 SB2022091372
SB2022091377
SB2022111138
and 5 more
#VU67270 - Use of Insufficiently Random Values
CVE-2022-1615		 CWE-330 Low
No
No
 - 13.09.2022 SB2022091371
SB2022091377
SB2022091448
and 18 more
#VU66123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-3709		 CWE-79 Medium
No
No
 - 05.08.2022 SB2022080507
SB2022080510
SB2022080808
and 43 more
#VU63711 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1664		 CWE-22 Medium
No
No
 - 26.05.2022 SB2022052610
SB2022052613
SB2022052622
and 9 more
#VU59812 - Permissions, Privileges, and Access Controls
CVE-2021-4155		 CWE-264 Low
No
No
 - 19.01.2022 SB2022011910
SB2022011932
SB2022011937
and 54 more
#VU57488 - Improper input validation
CVE-2021-3522		 CWE-20 Low
No
No
 - 19.10.2021 SB2021101940
SB2022041131
SB2022041132
and 12 more
#VU54338 - Incorrect Default Permissions
CVE-2019-2708		 CWE-276 Low
No
No
 - 23.06.2021 SB2019042324
SB2021062314
SB2021062315
and 15 more
#VU26643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-10696		 CWE-22 High
No
No
 - 07.04.2020 SB2020040723
SB2020042905
SB2020043013
and 12 more
#VU17200 - Missing release of memory after effective lifetime
CVE-2019-6502		 CWE-401 Low
No
No
 - 24.01.2019 SB2019012415
SB2020030422
SB2019123150
and 2 more
#VU15945 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10903		 CWE-200 Low
No
No
 - 16.11.2018 SB2018071715
SB2018111903
SB2018102518
and 3 more


Showing elements 2601 - 2620 out of 2715