Known vulnerabilities in Public Cloud Module 15-SP4 - page 5

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 355
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP4 Public Cloud Module 15-SP4 is affected by 355 vulnerabilities: 17 high, 145 medium, 193 low Critical High Medium Low

Vulnerabilities (355)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123116 - Uncontrolled Recursion
CVE-2026-0994		 CWE-674 Medium
No
No
 - 20.02.2026 SB2026022039
SB2026022040
SB2026022041
and 27 more
#VU122819 - Command injection
CVE-2025-15367		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 57 more
#VU122818 - Command injection
CVE-2025-15366		 CWE-77 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 53 more
#VU122816 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-15282		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 25 more
#VU122815 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-0865		 CWE-444 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021347
SB2026021348
and 50 more
#VU122814 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-0672		 CWE-93 Medium
No
No
 - 13.02.2026 SB2026021343
SB2026021353
SB2026021354
and 30 more
#VU122270 - Resource exhaustion
CVE-2026-23490		 CWE-400 Medium
No
No
 - 03.02.2026 SB2026020365
SB2026020366
SB2026020370
and 52 more
#VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24049		 CWE-22 Medium
Public exploit available
No
 - 22.01.2026 SB2026012210
SB2026012503
SB2026012761
and 20 more
#VU121279 - Deserialization of Untrusted Data
CVE-2026-21226		 CWE-502 Medium
No
No
 - 13.01.2026 SB2026011399
SB2026020642
SB2026020977
and 8 more
#VU121072 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-21441		 CWE-409 Medium
No
No
 - 07.01.2026 SB2026010780
SB2026011269
SB2026011328
and 89 more
#VU119238 - Inefficient Algorithmic Complexity
CVE-2025-12084		 CWE-407 Low
No
No
 - 06.12.2025 SB2025120606
SB20251226352
SB2025123104
and 48 more
#VU119234 - Resource exhaustion
CVE-2025-13837		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120603
SB20251226352
SB2025123104
and 13 more
#VU119233 - Resource exhaustion
CVE-2025-13836		 CWE-400 Medium
No
No
 - 06.12.2025 SB2025120602
SB20251226352
SB2025123104
and 36 more
#VU119231 - Resource exhaustion
CVE-2025-66471		 CWE-400 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2026011313
and 89 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 94 more
#VU118735 - Resource exhaustion
CVE-2025-6075		 CWE-400 Low
No
No
 - 24.11.2025 SB2025112495
SB2025112498
SB2025112569
and 26 more
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 - 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 54 more
#VU116971 - Improper input validation
CVE-2025-8291		 CWE-20 Medium
No
No
 - 14.10.2025 SB2025101418
SB2025101423
SB2025101424
and 47 more
#VU100921 - Incorrect Regular Expression
CVE-2024-21538		 CWE-185 Medium
No
No
 - 26.11.2024 SB2024112627
SB2024112629
SB2024120325
and 67 more
#VU99563 - Improper Verification of Cryptographic Signature
CVE-2024-48948		 CWE-347 Low
No
No
 - 31.10.2024 SB2024103162
SB2024103166
SB2024110115
and 18 more


Showing elements 81 - 100 out of 355