Known vulnerabilities in release-notes-susemanager - page 3
Vendor:
SUSE
Software:
release-notes-susemanager
Software CPE:
cpe:2.3:o:suse:release-notes-susemanager:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
54
Public exploits:
3
Known exploited (KEV):
0
Breakdown by Severity Chart
4.3.19-150400.3.157.1
4.3.18-150400.3.154.2
4.3.17-150400.3.151.1
4.3.16.2-150400.3.148.1
4.3.16.1-150400.3.143.2
4.3.15.2-150400.3.133.1
4.3.15.1-150400.3.128.2
4.3.15-150400.3.125.2
4.3.14-150400.3.122.1
4.3.13-150400.3.113.2
4.3.12-150400.3.108.2
4.2.13-150300.3.81.1
4.3.11-150400.3.100.1
4.3.10-150400.3.93.1
4.3.9-150400.3.90.1
4.3.8-150400.3.77.1
4.3.7-150400.3.72.1
4.2.5.1-150300.3.34.1
4.1.14.1-150200.3.77.1
4.3.4-150400.3.43.1
4.2.10-150300.3.57.1
4.3.2-150400.3.15.1
4.2.9-150300.3.54.1
4.2.8-150300.3.51.2
4.2.7-150300.3.44.1
4.1.15-150200.3.80.1
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86855 - Improper Authorization CVE-2022-0860 |
CWE-285 | Medium | 4.3.2-150400.3.15.1 | 27.02.2024 |
SB2024022765 SB2024022766 SB2024022767 and 6 more |
||
| #VU82817 - Incorrect Permission Assignment for Critical Resource CVE-2022-22941 |
CWE-732 | Medium | 4.1.14.1-150200.3.77.1, 4.2.5.1-150300.3.34.1 | 07.11.2023 |
SB2022032942 SB2023110714 SB2022033035 and 21 more |
||
| #VU82815 - Authentication Bypass by Capture-replay CVE-2022-22936 |
CWE-294 | Medium | 4.1.14.1-150200.3.77.1, 4.2.5.1-150300.3.34.1 | 07.11.2023 |
SB2022032942 SB2023110714 SB2022033035 and 21 more |
||
| #VU82801 - Insufficient Verification of Data Authenticity CVE-2022-22935 |
CWE-345 | Medium | 4.1.14.1-150200.3.77.1, 4.2.5.1-150300.3.34.1 | 07.11.2023 |
SB2022032942 SB2023110714 SB2022033035 and 20 more |
||
| #VU82800 - Cryptographic Issues CVE-2022-22934 |
CWE-310 | Low | 4.1.14.1-150200.3.77.1, 4.2.5.1-150300.3.34.1 | 07.11.2023 |
SB2022032942 SB2023110714 SB2022033035 and 21 more |
||
| #VU67516 - Command injection CVE-2021-42740 |
CWE-77 | High | 4.2.9-150300.3.54.1, 4.3.2-150400.3.15.1 | 20.09.2022 |
SB2021102139 SB2022092053 SB2022092054 and 9 more |
||
| #VU67515 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-41411 |
CWE-611 | High | 4.2.9-150300.3.54.1, 4.3.2-150400.3.15.1 | 20.09.2022 |
SB2022092052 SB2022092053 SB2022092054 and 2 more |
||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | 4.2.9-150300.3.54.1, 4.3.2-150400.3.15.1 | 27.07.2022 |
SB2022072729 SB2022072901 SB2022081048 and 102 more |
||
| #VU64572 - Information Exposure Through an Error Message CVE-2022-31248 |
CWE-209 | Low | 4.1.15-150200.3.80.1, 4.2.7-150300.3.44.1, 4.2.8-150300.3.51.2 | 22.06.2022 |
SB2022062201 SB2022062202 SB2022062203 and 5 more |
||
| #VU64571 - Allocation of Resources Without Limits or Throttling CVE-2022-21952 |
CWE-770 | Medium | 4.1.15-150200.3.80.1, 4.2.7-150300.3.44.1 | 22.06.2022 |
SB2022062201 SB2022062202 SB2022062203 and 2 more |
||
| #VU64030 - Resource exhaustion CVE-2021-44906 |
CWE-400 | High | 4.2.7-150300.3.44.1 | 07.06.2022 |
SB2022060836 SB2022062103 SB2022062203 and 53 more |
||
| #VU62716 - Improper input validation CVE-2022-26520 |
CWE-20 | High | 4.1.15-150200.3.80.1 | 02.05.2022 |
SB2022050206 SB2022061311 SB2022062202 and 13 more |
||
| #VU62714 - Improper Initialization CVE-2022-21724 |
CWE-665 | Medium | 4.1.15-150200.3.80.1 | 02.05.2022 |
SB2022050205 SB2022062202 SB2022062204 and 18 more |
||
| #VU62361 - Improper Control of Generation of Code ('Code Injection') CVE-2021-43138 |
CWE-94 | Medium | 4.2.9-150300.3.54.1, 4.3.2-150400.3.15.1 | 15.04.2022 |
SB2022041532 SB2022041533 SB2022062103 and 33 more |
Showing elements 41 - 60 out of 54