Known vulnerabilities in Server Applications Module - page 7

Vendor: SUSE
Software: Server Applications Module
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 630
Public exploits: 40
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Server Applications Module Server Applications Module is affected by 630 known vulnerabilities: 5 critical, 47 high, 372 medium, 206 low Critical High Medium Low

Vulnerabilities (630)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131379 - Use After Free
CVE-2026-40701		 CWE-416 Medium
No
No
 - 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU131377 - Heap-based Buffer Overflow
CVE-2026-42945		 CWE-122 Critical
Available
Exploited
 - 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 27 more
#VU131375 - Uncontrolled Memory Allocation
CVE-2026-42946		 CWE-789 Medium
No
No
 - 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 14 more
#VU131374 - Out-of-bounds read
CVE-2026-42934		 CWE-125 Medium
No
No
 - 14.05.2026 SB2026051401
SB2026051497
SB2026051498
and 12 more
#VU129540 - Out-of-bounds read
CVE-2026-34059		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 28 more
#VU129541 - Out-of-bounds read
CVE-2026-34032		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 28 more
#VU129542 - Out-of-bounds read
CVE-2026-33857		 CWE-125 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 28 more
#VU129543 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-33523		 CWE-113 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051240
and 20 more
#VU129544 - NULL Pointer Dereference
CVE-2026-33007		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 20 more
#VU129545 - Information Exposure Through Timing Discrepancy
CVE-2026-33006		 CWE-208 High
Available
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 11 more
#VU129546 - NULL Pointer Dereference
CVE-2026-29169		 CWE-476 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB20260513119
and 17 more
#VU129547 - Allocation of Resources Without Limits or Throttling
CVE-2026-29168		 CWE-770 Medium
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051103
and 17 more
#VU129548 - Heap-based Buffer Overflow
CVE-2026-28780		 CWE-122 High
No
No
 - 04.05.2026 SB2026050479
SB2026050772
SB2026051101
and 28 more
#VU128414 - Allocation of Resources Without Limits or Throttling
CVE-2026-42198		 CWE-770 Medium
No
No
 - 28.04.2026 SB20260428236
SB2026052067
SB2026052092
and 25 more
#VU125775 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-23941		 CWE-444 High
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 7 more
#VU125774 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-23942		 CWE-22 Low
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 6 more
#VU125773 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-23943		 CWE-409 Medium
No
No
 - 10.04.2026 SB2026041022
SB2026041027
SB2026041028
and 5 more
#VU125772 - Relative Path Traversal
CVE-2026-21620		 CWE-23 Low
No
No
 - 10.04.2026 SB2026041021
SB2026041023
SB2026041024
and 6 more
#VU124475 - Out-of-bounds write
CVE-2026-32647		 CWE-787 High
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 18 more
#VU124473 - NULL Pointer Dereference
CVE-2026-27651		 CWE-476 Medium
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 18 more


Showing elements 121 - 140 out of 630