Known vulnerabilities in Public Cloud Module 15-SP4

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 355
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP4 Public Cloud Module 15-SP4 is affected by 355 vulnerabilities: 17 high, 145 medium, 193 low Critical High Medium Low

Vulnerabilities (355)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144264 - Resource exhaustion
CVE-2026-84304		 CWE-400 Medium
No
No
 - 19.08.2026 SB2026081947
SB2026090853
#VU144262 - Improper Handling of Case Sensitivity
CVE-2026-84303		 CWE-178 Medium
No
No
 - 19.08.2026 SB2026081947
SB2026090853
#VU144224 - Improper Handling of Exceptional Conditions
CVE-2026-27448		 CWE-755 Medium
No
No
 - 18.08.2026 SB2026081870
SB2026081877
SB2026081878
and 21 more
#VU144104 - Buffer overflow
CVE-2026-27459		 CWE-120 High
No
No
 - 18.08.2026 SB2026081845
SB2026081847
SB2026081877
and 17 more
#VU142416 - Inefficient Algorithmic Complexity
CVE-2026-54284		 CWE-407 Medium
No
No
 - 13.08.2026 SB2026081381
SB2026082545
SB2026090162
and 3 more
#VU142415 - Inefficient Regular Expression Complexity
CVE-2026-59893		 CWE-1333 Medium
No
No
 - 13.08.2026 SB2026081381
SB2026082545
SB2026083027
and 4 more
#VU142413 - Resource exhaustion
CVE-2026-71491		 CWE-400 Medium
No
No
 - 13.08.2026 SB2026081381
SB2026082545
SB2026090162
and 3 more
#VU142412 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-59894		 CWE-94 High
No
No
 - 13.08.2026 SB2026081381
SB2026082545
SB2026090162
and 2 more
#VU140595 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-71557		 CWE-22 Low
No
No
 - 31.07.2026 SB2026073124
SB2026090865
#VU140594 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-71556		 CWE-59 Medium
No
No
 - 31.07.2026 SB2026073124
SB2026090865
#VU139893 - Resource exhaustion
CVE-2026-69244		 CWE-400 Medium
No
No
 - 28.07.2026 SB2026072881
SB20260824258
SB20260824259
and 1 more
#VU139888 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-69243		 CWE-444 Medium
No
No
 - 28.07.2026 SB2026072882
SB20260824258
SB20260824259
and 4 more
#VU139887 - Improper input validation
CVE-2026-59881		 CWE-20 Medium
No
No
 - 28.07.2026 SB2026072882
SB2026080738
SB2026080739
and 4 more
#VU135769 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-59939		 CWE-409 Medium
No
No
 - 29.06.2026 SB2026062991
SB2026072355
SB2026073009
and 8 more
#VU133994 - Improper input validation
CVE-2026-54277		 CWE-20 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133993 - Resource exhaustion
CVE-2026-54278		 CWE-400 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133992 - Allocation of Resources Without Limits or Throttling
CVE-2026-54273		 CWE-770 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133990 - Improper Certificate Validation
CVE-2026-54275		 CWE-295 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133989 - Improper input validation
CVE-2026-54274		 CWE-20 Medium
No
No
 - 09.06.2026 SB2026060921
SB2026070626
SB2026070627
and 2 more
#VU133988 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-50269		 CWE-113 Medium
No
No
 - 09.06.2026 SB2026060241
SB2026072492
SB2026072493


Showing elements 1 - 20 out of 355