Known vulnerabilities in Server Applications Module 15-SP7 - page 12

Vendor: SUSE
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Total vulnerabilities: 344
Public exploits: 19
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Server Applications Module version 15-SP7 Server Applications Module 15-SP7 is affected by 344 vulnerabilities: 2 critical, 30 high, 206 medium, 106 low Critical High Medium Low

Vulnerabilities (344)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121952 - Reachable Assertion
CVE-2025-13878
CWE-617 Medium
No
No
- 22.01.2026 SB2026012249
SB2026012301
SB2026012757
and 2 more
#VU121274 - Incorrect Calculation of Buffer Size
CVE-2026-22791
CWE-131 Medium
No
No
- 13.01.2026 SB2026011395
SB2026012656
SB2026013045
and 5 more
#VU120621 - Stack-based buffer overflow
CVE-2025-12464
CWE-121 Low
No
No
- 29.12.2025 SB2025122914
SB2025122929
SB2026010596
and 9 more
#VU120191 - Improper input validation
CVE-2024-12224
CWE-20 Medium
No
No
- 18.12.2025 SB2025121849
SB2025121856
SB2025121857
and 22 more
#VU119955 - Heap-based Buffer Overflow
CVE-2025-14104
CWE-122 Low
No
No
- 15.12.2025 SB2025121510
SB2025121939
SB2026011282
and 14 more
#VU119150 - Integer overflow
CVE-2025-55753
CWE-190 Low
No
No
- 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 32 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098
CWE-97 Low
Public exploit available
No
- 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082
CWE-74 Low
No
No
- 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU119146 - Improper input validation
CVE-2025-66200
CWE-20 Low
No
No
- 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 31 more
#VU118851 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-13699
CWE-22 High
No
No
- 01.12.2025 SB2025120126
SB2025121762
SB2025121943
and 31 more
#VU118836 - Incorrect Default Permissions
CVE-2025-13193
CWE-276 Medium
No
No
- 28.11.2025 SB2025112859
SB2025112864
SB2025120519
and 12 more
#VU118835 - Resource exhaustion
CVE-2025-12748
CWE-400 Medium
No
No
- 28.11.2025 SB2025112859
SB2025112864
SB2025120541
and 12 more
#VU118730 - Use After Free
CVE-2025-54770
CWE-416 Low
No
No
- 24.11.2025 SB2025112110
SB2025112476
SB2025112845
and 4 more
#VU118662 - Use After Free
CVE-2025-54771
CWE-416 Low
No
No
- 21.11.2025 SB2025112110
SB2025112111
SB2025112122
and 10 more
#VU118520 - Integer overflow
CVE-2025-12818
CWE-190 Medium
No
No
- 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 64 more
#VU118519 - Missing Authorization
CVE-2025-12817
CWE-862 Low
No
No
- 13.11.2025 SB2025111368
SB2025112204
SB2025112205
and 49 more
#VU117653 - Permissions, Privileges, and Access Controls
CVE-2025-58149
CWE-264 Low
No
No
- 24.10.2025 SB2025102474
SB20251024128
SB2025102501
and 8 more
#VU116886 - Use After Free
CVE-2025-11234
CWE-416 Medium
No
No
- 10.10.2025 SB2025101011
SB2025122929
SB2026010596
and 20 more
#VU107895 - Use After Free
CVE-2025-3416
CWE-416 Medium
No
No
- 24.04.2025 SB2025042401
SB2025042404
SB2025042405
and 32 more
#VU94527 - Out-of-bounds read
CVE-2024-6505
CWE-125 Low
No
No
- 18.07.2024 SB2024071837
SB2024092765
SB2024092766
and 6 more


Showing elements 221 - 240 out of 344