Known vulnerabilities in release-notes-susemanager

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:release-notes-susemanager:*:*:*:*:*:suse_linux:*:*
Total vulnerabilities: 54
Public exploits: 3
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting release-notes-susemanager release-notes-susemanager is affected by 54 known vulnerabilities: 12 high, 25 medium, 17 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128730 - Improper Authorization
CVE-2026-33186
CWE-285 High
No
No
4.3.18-150400.3.154.2 01.05.2026 SB2026050106
SB2026050107
SB2026050108
and 70 more
#VU128368 - Uncontrolled Memory Allocation
CVE-2026-42154
CWE-789 Medium
No
No
4.3.18-150400.3.154.2 28.04.2026 SB20260428200
SB2026060464
SB2026060465
and 3 more
#VU128367 - Exposure of sensitive information to an unauthorized actor
CVE-2026-42151
CWE-200 Medium
No
No
4.3.18-150400.3.154.2 28.04.2026 SB20260428200
SB2026060464
SB2026060465
and 1 more
#VU128147 - Resource exhaustion
CVE-2026-31958
CWE-400 Medium
No
No
4.3.18-150400.3.154.2 27.04.2026 SB20260427102
SB20260427109
SB20260427110
and 40 more
#VU126752 - Improper input validation
CVE-2026-27727
CWE-20 High
No
No
4.3.17-150400.3.151.1 22.04.2026 SB20260422128
SB20260422169
SB20260422170
and 8 more
#VU126753 - Deserialization of Untrusted Data
CVE-2026-27830
CWE-502 Medium
No
No
4.3.17-150400.3.151.1 22.04.2026 SB20260422128
SB20260422168
SB20260422170
and 8 more
#VU125945 - Improper input validation
CVE-2026-34986
CWE-20 Medium
No
No
4.3.18-150400.3.154.2 14.04.2026 SB2026041463
SB2026041464
SB2026041465
and 74 more
#VU125920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-40179
CWE-79 Low
No
No
4.3.18-150400.3.154.2 14.04.2026 SB2026041458
SB2026060464
SB2026060465
#VU124876 - Inefficient Regular Expression Complexity
CVE-2026-25547
CWE-1333 Low
No
No
4.3.17-150400.3.151.1 06.04.2026 SB2026040628
SB2026040631
SB2026040632
and 13 more
#VU124711 - Exposure of sensitive information to an unauthorized actor
CVE-2026-27877
CWE-200 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026042431
SB2026042902
and 2 more
#VU124710 - Improper input validation
CVE-2026-33375
CWE-20 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026060464
#VU124709 - Improper Authorization
CVE-2026-21724
CWE-285 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026060464
#VU124708 - Improper input validation
CVE-2026-28375
CWE-20 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026060464
#VU124706 - Uncontrolled Memory Allocation
CVE-2026-27879
CWE-789 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026060464
#VU124705 - Improper input validation
CVE-2026-27876
CWE-20 Low
No
No
4.3.18-150400.3.154.2 31.03.2026 SB2026033194
SB2026060464
#VU123311 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-1615
CWE-94 High
No
No
4.3.17-150400.3.151.1 27.02.2026 SB2026022707
SB2026022708
SB2026032720
and 4 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-61140
CWE-1321 High
No
No
4.3.17-150400.3.151.1 27.02.2026 SB2026022706
SB2026022708
SB2026030405
and 3 more
#VU123174 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-27606
CWE-22 High
Available
No
4.3.18-150400.3.154.2 24.02.2026 SB2026022445
SB2026040631
SB2026040632
and 4 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465
CWE-1321 Medium
No
No
4.3.17-150400.3.151.1 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 71 more
#VU61599 - Improper input validation
CVE-2022-21698
CWE-20 Medium
No
No
4.3.18-150400.3.154.2 24.03.2022 SB2022021530
SB2022032413
SB2022040807
and 111 more


Showing elements 1 - 20 out of 54