Known vulnerabilities in Server Applications Module 15-SP5 - page 9

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 183
Public exploits: 15
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP5 Server Applications Module 15-SP5 is affected by 183 vulnerabilities: 1 critical, 10 high, 120 medium, 52 low Critical High Medium Low

Vulnerabilities (183)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78507 - Heap-based Buffer Overflow
CVE-2023-36824		 CWE-122 Low
No
No
 - 21.07.2023 SB2023072126
SB2023072127
SB2023082176
and 3 more
#VU77962 - Resource exhaustion
CVE-2018-1000518		 CWE-400 Medium
No
No
 - 05.07.2023 SB2018062630
SB2023070510
SB2023092027
and 3 more
#VU77773 - NULL Pointer Dereference
CVE-2023-33461		 CWE-476 Medium
No
No
 - 28.06.2023 SB2023062852
SB2023062853
SB2023063047
and 6 more
#VU77612 - Resource exhaustion
CVE-2023-2828		 CWE-400 Medium
No
No
 - 21.06.2023 SB2023062155
SB2023062201
SB2023062601
and 66 more
#VU77610 - Resource Management Errors
CVE-2023-2911		 CWE-399 Medium
No
No
 - 21.06.2023 SB2023062155
SB2023062201
SB2023062205
and 15 more
#VU77522 - Integer overflow
CVE-2022-42336		 CWE-190 Low
No
No
 - 19.06.2023 SB2023061933
SB2023061935
SB20230820138
and 1 more
#VU76721 - Missing release of memory after effective lifetime
CVE-2023-2700		 CWE-401 Low
No
No
 - 31.05.2023 SB2023053145
SB2023053152
SB2023060225
and 12 more
#VU75481 - Untrusted Pointer Dereference
CVE-2022-42335		 CWE-822 Medium
No
No
 - 25.04.2023 SB2023042532
SB2023061935
SB2023082071
#VU75177 - Improper input validation
CVE-2023-28856		 CWE-20 Medium
No
No
 - 17.04.2023 SB2023041725
SB2023050823
SB2023052621
and 19 more
#VU74579 - Improper input validation
CVE-2023-1668		 CWE-20 Medium
No
No
 - 06.04.2023 SB2023040683
SB2023041403
SB2023041414
and 15 more
#VU73836 - Reachable Assertion
CVE-2023-28425		 CWE-617 Medium
No
No
 - 20.03.2023 SB2023032036
SB2023072127
SB2023080304
and 4 more
#VU73726 - Improper input validation
CVE-2023-27530		 CWE-20 Medium
No
No
 - 15.03.2023 SB2023031545
SB2023031551
SB2023042535
and 18 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120		 CWE-79 Medium
No
No
 - 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU71261 - Improper input validation
CVE-2022-1941		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011780
SB2023011801
SB2023011802
and 24 more
#VU70668 - Incorrect Default Permissions
CVE-2022-31254		 CWE-276 Low
No
No
 - 04.01.2023 SB2023010404
SB2023010405
SB2023010406
and 3 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU62403 - Improper input validation
CVE-2021-22570		 CWE-20 Medium
No
No
 - 19.04.2022 SB2022041949
SB2022062233
SB2022100638
and 34 more
#VU60181 - Resource Management Errors
CVE-2021-22569		 CWE-399 Medium
Public exploit available
No
 - 31.01.2022 SB2022013106
SB2022013107
SB2022041933
and 42 more
#VU50990 - Integer overflow
CVE-2020-36242		 CWE-190 High
No
No
 - 28.02.2021 SB2021022812
SB2021022813
SB2021052024
and 27 more
#VU50367 - Covert Timing Channel
CVE-2020-25659		 CWE-385 Medium
No
No
 - 11.01.2021 SB2020111230
SB2021052024
SB2021060319
and 18 more


Showing elements 161 - 180 out of 183