Known vulnerabilities in Public Cloud Module 15-SP6 - page 2

Vendor: SUSE
Software: Public Cloud Module
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:public_cloud_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3829
Public exploits: 21
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Public Cloud Module version 15-SP6 Public Cloud Module 15-SP6 is affected by 3829 vulnerabilities: 1 critical, 14 high, 92 medium, 3722 low Critical High Medium Low

Vulnerabilities (3829)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU131748 - Out-of-bounds write
CVE-2026-45784		 CWE-787 Medium
No
No
 - 18.05.2026 SB2026051894
SB2026070947
SB2026070948
and 9 more
#VU129723 - Heap-based Buffer Overflow
CVE-2026-44662		 CWE-122 Medium
No
No
 - 05.05.2026 SB2026050553
SB2026061917
SB2026061918
and 35 more
#VU127955 - Allocation of Resources Without Limits or Throttling
CVE-2026-22815		 CWE-770 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127954 - Resource exhaustion
CVE-2026-34513		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127953 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-34514		 CWE-93 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127951 - Improper input validation
CVE-2026-34516		 CWE-20 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 7 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU124838 - Resource exhaustion
CVE-2026-34230		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124837 - Permissive Regular Expression
CVE-2026-34763		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124836 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-34786		 CWE-180 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124827 - Partial String Comparison
CVE-2026-34785		 CWE-187 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124823 - Interpretation Conflict
CVE-2026-26961		 CWE-436 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-26962		 CWE-93 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU86795 - Improper input validation
CVE-2023-29483		 CWE-20 Medium
No
No
 - 26.02.2024 SB2024022638
SB2024040115
SB2024042448
and 37 more


Showing elements 21 - 40 out of 3829