Known vulnerabilities in Server Applications Module - page 9

Vendor: SUSE
Software: Server Applications Module
Software CPE: cpe:2.3:o:suse:server_applications_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 602
Public exploits: 37
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Server Applications Module Server Applications Module is affected by 602 known vulnerabilities: 5 critical, 45 high, 354 medium, 198 low Critical High Medium Low

Vulnerabilities (602)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU131457 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-6475		 CWE-59 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 43 more
#VU131458 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-6476		 CWE-89 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB2026051852
and 7 more
#VU131459 - Stack-based buffer overflow
CVE-2026-6477		 CWE-121 High
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 51 more
#VU131460 - Information Exposure Through Timing Discrepancy
CVE-2026-6478		 CWE-208 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 50 more
#VU131461 - Uncontrolled Recursion
CVE-2026-6479		 CWE-674 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 33 more
#VU131463 - Stack-based buffer overflow
CVE-2026-6637		 CWE-121 Medium
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB20260514109
and 29 more
#VU131464 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-6638		 CWE-89 Low
No
No
 - 14.05.2026 SB20260514106
SB20260514108
SB2026051852
and 12 more
#VU124838 - Resource exhaustion
CVE-2026-34230		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124837 - Permissive Regular Expression
CVE-2026-34763		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124836 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-34786		 CWE-180 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124832 - Resource exhaustion
CVE-2026-34826		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124828 - Permissive Regular Expression
CVE-2026-34830		 CWE-625 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124827 - Partial String Comparison
CVE-2026-34785		 CWE-187 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124826 - Resource exhaustion
CVE-2026-34829		 CWE-400 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124823 - Interpretation Conflict
CVE-2026-26961		 CWE-436 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124822 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-26962		 CWE-93 Medium
No
No
 - 02.04.2026 SB2026040258
SB2026041762
SB20260507305
and 3 more
#VU124482 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-28753		 CWE-93 Medium
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026041117
and 4 more
#VU124480 - Integer overflow
CVE-2026-27784		 CWE-190 High
No
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026040801
and 17 more
#VU124478 - Heap-based Buffer Overflow
CVE-2026-27654		 CWE-122 Medium
Available
No
 - 25.03.2026 SB2026032585
SB20260325200
SB2026033174
and 17 more
#VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-1642		 CWE-349 Medium
No
No
 - 05.02.2026 SB2026020501
SB2026020505
SB2026020511
and 22 more


Showing elements 161 - 180 out of 602