Known vulnerabilities in SUSE Enterprise Storage 6 - page 66

Vendor: SUSE
Software: SUSE Enterprise Storage
Version: 6
Software CPE: cpe:2.3:o:suse:suse_enterprise_storage:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1525
Public exploits: 61
Known exploited (KEV): 27

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Enterprise Storage version 6 SUSE Enterprise Storage 6 is affected by 1525 vulnerabilities: 17 critical, 357 high, 550 medium, 601 low Critical High Medium Low

Vulnerabilities (1525)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57068 - Memory corruption
CVE-2021-38501		 CWE-119 High
No
No
 - 05.10.2021 SB2021100515
SB2021101208
SB2021101326
and 20 more
#VU57067 - Use After Free
CVE-2021-38498		 CWE-416 High
No
No
 - 05.10.2021 SB2021100515
SB2021101208
SB2021101326
and 20 more
#VU57066 - Origin Validation Error
CVE-2021-38497		 CWE-346 Medium
No
No
 - 05.10.2021 SB2021100515
SB2021101208
SB2021101326
and 20 more
#VU57065 - Memory corruption
CVE-2021-38500		 CWE-119 High
No
No
 - 05.10.2021 SB2021100515
SB2021100803
SB2021101208
and 22 more
#VU57064 - Use After Free
CVE-2021-38496		 CWE-416 High
No
No
 - 05.10.2021 SB2021100515
SB2021100803
SB2021101208
and 21 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Public exploit available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56615 - Insufficient Verification of Data Authenticity
CVE-2021-22947		 CWE-345 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 43 more
#VU56613 - Cleartext Transmission of Sensitive Information
CVE-2021-22946		 CWE-319 Medium
No
No
 - 15.09.2021 SB2021091514
SB2021091601
SB2021091715
and 53 more
#VU56385 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-3781		 CWE-94 High
Public exploit available
No
 - 07.09.2021 SB2021090718
SB2021091204
SB2021091404
and 8 more
#VU55598 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-32810		 CWE-362 High
No
No
 - 05.08.2021 SB2021080510
SB2021100515
SB2021101208
and 34 more
#VU55057 - Improper input validation
CVE-2021-2388		 CWE-20 Medium
No
No
 - 20.07.2021 SB2021072054
SB2021072055
SB2021072201
and 62 more
#VU54285 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29157		 CWE-22 Low
No
No
 - 21.06.2021 SB2021062107
SB2021062223
SB2021071801
and 9 more
#VU54284 - Resource Management Errors
CVE-2020-28200		 CWE-399 Medium
No
No
 - 21.06.2021 SB2021062107
SB2021062222
SB2021083139
and 5 more
#VU49237 - Exposure of sensitive information to an unauthorized actor
CVE-2020-24386		 CWE-200 Medium
No
No
 - 04.01.2021 SB2021010411
SB2021010412
SB2021010418
and 11 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100		 CWE-835 Medium
No
No
 - 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more
#VU28222 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13429		 CWE-79 Low
No
No
 - 25.05.2020 SB2020052516
SB2021092119
#VU24140 - Use After Free
CVE-2018-1311		 CWE-416 High
No
No
 - 08.01.2020 SB2019121828
SB2020030618
SB2020030619
and 31 more


Showing elements 1301 - 1320 out of 1525