Known vulnerabilities in Server Applications Module 15-SP7 - page 10

Vendor: SUSE
Software: Server Applications Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 316
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP7 Server Applications Module 15-SP7 is affected by 316 vulnerabilities: 2 critical, 28 high, 188 medium, 98 low Critical High Medium Low

Vulnerabilities (316)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128378 - Reachable Assertion
CVE-2026-23557		 CWE-617 Medium
No
No
 - 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 9 more
#VU128376 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23558		 CWE-362 Medium
No
No
 - 28.04.2026 SB20260428207
SB20260428235
SB2026042901
and 10 more
#VU128347 - Heap-based Buffer Overflow
CVE-2026-32710		 CWE-122 Medium
No
No
 - 28.04.2026 SB2026042874
SB20260428163
#VU128026 - Improper Neutralization
CVE-2025-67733		 CWE-707 Medium
No
No
 - 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU128025 - Out-of-bounds read
CVE-2026-21863		 CWE-125 Medium
No
No
 - 27.04.2026 SB2026042756
SB2026042759
SB2026042760
and 10 more
#VU126567 - Observable discrepancy
CVE-2025-54505		 CWE-203 Low
No
No
 - 20.04.2026 SB2026042081
SB20260428235
SB2026042901
and 39 more
#VU125777 - Incorrect Authorization
CVE-2026-28808		 CWE-863 High
No
No
 - 10.04.2026 SB2026041031
SB2026041046
SB2026041047
and 6 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-23943		 CWE-409 Medium
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 5 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 - 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU124835 - Improper Handling of Length Parameter Inconsistency
CVE-2026-34831		 CWE-130 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124616 - Resource exhaustion
CVE-2026-1519		 CWE-400 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 40 more
#VU124615 - Missing release of memory after effective lifetime
CVE-2026-3104		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU124614 - Improper Check or Handling of Exceptional Conditions
CVE-2026-3119		 CWE-703 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU124613 - Operation on a Resource after Expiration or Release
CVE-2026-3591		 CWE-672 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 4 more
#VU117336 - Covert Timing Channel
CVE-2025-59438		 CWE-385 Medium
No
No
 - 17.10.2025 SB2025101717
SB2025101718
SB2025101719
and 9 more
#VU113442 - Out-of-bounds read
CVE-2025-49133		 CWE-125 Low
No
No
 - 30.07.2025 SB2025073028
SB2025073029
SB2025073030
and 24 more
#VU100751 - Improper input validation
CVE-2024-11596		 CWE-20 Medium
No
No
 - 21.11.2024 SB2024112101
SB2024112221
SB2024112222
and 6 more
#VU100750 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-11595		 CWE-835 Medium
No
No
 - 20.11.2024 SB2024112101
SB2024112221
SB2024112222
and 2 more


Showing elements 181 - 200 out of 316