Known vulnerabilities in SUSE Linux - page 75

Vendor: SUSE
Software: SUSE Linux
Software CPE: cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1831
Public exploits: 162
Known exploited (KEV): 32
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux SUSE Linux is affected by 1831 known vulnerabilities: 19 critical, 451 high, 560 medium, 801 low Critical High Medium Low

Vulnerabilities (1831)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5850 - Server-Side Request Forgery (SSRF)
CVE-2016-3718		 CWE-918 High
Available
Exploited
 - 17.02.2017 SB2016050301
SB2016051806
SB2016051102
and 5 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714		 CWE-94 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174		 CWE-22 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560		 CWE-61 Medium
No
No
 - 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU241 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2118		 CWE-300 High
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU240 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2115		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU237 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2112		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 24 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111		 CWE-290 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU234 - Resource exhaustion
CVE-2015-5370		 CWE-400 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 22 more
#VU32318 - Heap-based Buffer Overflow
CVE-2016-2324		 CWE-122 High
No
No
 - 08.04.2016 SB2016040807
SB2016031701
SB2016031702
and 10 more
#VU32317 - Heap-based Buffer Overflow
CVE-2016-2315		 CWE-122 High
No
No
 - 08.04.2016 SB2016040806
SB2016031701
SB2016031702
and 10 more
#VU32322 - Improper input validation
CVE-2016-1286		 CWE-20 High
No
No
 - 10.03.2016 SB2016031009
SB2016032303
SB2016031804
and 14 more
#VU32321 - Improper input validation
CVE-2016-1285		 CWE-20 Medium
No
No
 - 10.03.2016 SB2016031008
SB2016032303
SB2016031804
and 14 more
#VU32340 - Improper input validation
CVE-2016-1523		 CWE-20 Medium
No
No
 - 13.02.2016 SB2016021304
SB2016022404
SB2016022405
and 1 more
#VU32347 - Permissions, Privileges, and Access Controls
CVE-2015-5252		 CWE-264 Medium
No
No
 - 30.12.2015 SB2015123005
SB2016041911
SB2016011912
and 7 more


Showing elements 1481 - 1500 out of 1831