Known vulnerabilities in Public Cloud Module 15-SP4 - page 6

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 341
Public exploits: 23
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP4 Public Cloud Module 15-SP4 is affected by 341 vulnerabilities: 15 high, 134 medium, 192 low Critical High Medium Low

Vulnerabilities (341)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 - 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 107 more
#VU107949 - Improper input validation
CVE-2025-1795		 CWE-20 Low
No
No
 - 25.04.2025 SB2025042512
SB2025042513
SB2025042523
and 13 more
#VU107895 - Use After Free
CVE-2025-3416		 CWE-416 Medium
No
No
 - 24.04.2025 SB2025042401
SB2025042404
SB2025042405
and 32 more
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 - 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 15 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105535 - Command injection
CVE-2025-24049		 CWE-77 Low
No
No
 - 11.03.2025 SB2025031172
SB2025032640
SB2025040993
and 2 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 - 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU105387 - Improper input validation
CVE-2025-27516		 CWE-20 Low
No
No
 - 06.03.2025 SB2025030628
SB2025031001
SB2025031002
and 83 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 - 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103812 - Improper input validation
CVE-2025-0938		 CWE-20 Low
No
No
 - 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 76 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 - 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU101972 - Security Features
CVE-2024-56326		 CWE-254 Low
No
No
 - 27.12.2024 SB2024122789
SB2024122790
SB2024122791
and 78 more
#VU101971 - Security Features
CVE-2024-56201		 CWE-254 Low
No
No
 - 27.12.2024 SB2024122789
SB2025010203
SB2025010322
and 62 more
#VU101889 - Improper input validation
CVE-2024-11407		 CWE-20 Medium
No
No
 - 20.12.2024 SB2024122036
SB2024122046
SB2024122057
and 10 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Public exploit available
No
 - 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU98200 - Command injection
CVE-2024-43591		 CWE-77 Low
No
No
 - 08.10.2024 SB2024100875
SB2025030105
SB2025072343
#VU96644 - Improper input validation
CVE-2024-7246		 CWE-20 Medium
No
No
 - 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88853 - Incorrect Regular Expression
CVE-2024-3772		 CWE-185 Medium
No
No
 - 19.04.2024 SB2024041926
SB2024041929
SB2024041930
and 8 more
#VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27306		 CWE-79 Medium
No
No
 - 18.04.2024 SB2024041813
SB2024042444
SB2024042445
and 12 more


Showing elements 101 - 120 out of 341