Known vulnerabilities in Public Cloud Module 15-SP5 - page 4

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2558
Public exploits: 22
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP5 Public Cloud Module 15-SP5 is affected by 2558 vulnerabilities: 1 critical, 13 high, 126 medium, 2418 low Critical High Medium Low

Vulnerabilities (2558)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115761 - XML Injection
CVE-2025-9375		 CWE-91 Medium
No
No
 - 18.09.2025 SB2025091824
SB2025091832
SB2025092653
and 3 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU112882 - Uncontrolled Recursion
CVE-2025-4565		 CWE-674 Medium
No
No
 - 14.07.2025 SB2025071429
SB2025071430
SB2025071431
and 21 more
#VU111989 - Resource exhaustion
CVE-2025-46727		 CWE-400 Medium
No
No
 - 27.06.2025 SB2025062709
SB2025062710
SB2025062711
and 24 more
#VU111976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-32441		 CWE-362 Low
No
No
 - 26.06.2025 SB2025062650
SB2025062720
SB2025062721
and 5 more
#VU111944 - Improper input validation
CVE-2025-6545		 CWE-20 Medium
No
No
 - 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 11 more
#VU111943 - Improper input validation
CVE-2025-6547		 CWE-20 Medium
No
No
 - 25.06.2025 SB2025062533
SB2025062536
SB2025062537
and 10 more
#VU107611 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-6827		 CWE-444 High
No
No
 - 18.04.2025 SB2025041831
SB2025041832
SB2025041834
and 18 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU105535 - Command injection
CVE-2025-24049		 CWE-77 Low
No
No
 - 11.03.2025 SB2025031172
SB2025032640
SB2025040993
and 2 more
#VU105461 - Resource exhaustion
CVE-2025-22868		 CWE-400 Medium
No
No
 - 10.03.2025 SB2025031013
SB2025031015
SB2025031076
and 89 more
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339		 CWE-59 Low
No
No
 - 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613		 CWE-88 Low
No
No
 - 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU101889 - Improper input validation
CVE-2024-11407		 CWE-20 Medium
No
No
 - 20.12.2024 SB2024122036
SB2024122046
SB2024122057
and 10 more
#VU101777 - Improper Authorization
CVE-2024-45337		 CWE-285 Medium
Public exploit available
No
 - 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU98200 - Command injection
CVE-2024-43591		 CWE-77 Low
No
No
 - 08.10.2024 SB2024100875
SB2025030105
SB2025072343
#VU96644 - Improper input validation
CVE-2024-7246		 CWE-20 Medium
No
No
 - 30.08.2024 SB2024083031
SB2024083036
SB2024090612
and 11 more
#VU92336 - NULL Pointer Dereference
CVE-2021-47594		 CWE-476 Low
No
No
 - 20.06.2024 SB2024062056
SB2024121505
SB2024121752
and 1 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-27306		 CWE-79 Medium
No
No
 - 18.04.2024 SB2024041813
SB2024042444
SB2024042445
and 12 more


Showing elements 61 - 80 out of 2558