Known vulnerabilities in SUSE Linux Enterprise Desktop 15-SP3 - page 12

Vendor: SUSE
Software: SUSE Linux Enterprise Desktop
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 949
Public exploits: 31
Known exploited (KEV): 6

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop version 15-SP3 SUSE Linux Enterprise Desktop 15-SP3 is affected by 949 vulnerabilities: 2 critical, 228 high, 300 medium, 419 low Critical High Medium Low

Vulnerabilities (949)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 - 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU63065 - Use After Free
CVE-2021-3796		 CWE-416 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 21 more
#VU63063 - Heap-based Buffer Overflow
CVE-2021-3778		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 22 more
#VU63059 - Heap-based Buffer Overflow
CVE-2021-3872		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 21 more
#VU63057 - Heap-based Buffer Overflow
CVE-2021-3927		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 23 more
#VU63052 - Use of Uninitialized Variable
CVE-2021-3928		 CWE-457 High
No
No
 - 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 25 more
#VU61830 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25255		 CWE-94 Low
No
No
 - 04.04.2022 SB2022021640
SB2022040411
SB2022110842
and 15 more
#VU61492 - Incorrect Default Permissions
CVE-2022-0358		 CWE-276 Low
No
No
 - 21.03.2022 SB2022032112
SB2022032120
SB2022032121
and 13 more
#VU61109 - Improper Access Control
CVE-2022-26386		 CWE-284 Low
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 24 more
#VU61105 - Use After Free
CVE-2022-26381		 CWE-416 High
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61104 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-26387		 CWE-367 Medium
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61103 - Permissions, Privileges, and Access Controls
CVE-2022-26384		 CWE-264 Medium
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU61102 - Insufficient UI Warning of Dangerous Operations
CVE-2022-26383		 CWE-357 Low
No
No
 - 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 - 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60762 - Improper Certificate Validation
CVE-2021-25636		 CWE-295 Low
No
No
 - 22.02.2022 SB2022022217
SB2022031624
SB2022110838
and 4 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 111 more
#VU60188 - Untrusted Search Path
CVE-2022-23853		 CWE-426 Low
No
No
 - 31.01.2022 SB2022013113
SB2022031532
SB2024011532
and 2 more
#VU59898 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-21658		 CWE-362 High
Public exploit available
No
 - 21.01.2022 SB2022012101
SB2022051149
SB2022031433
and 17 more
#VU58812 - Off-by-one Error
CVE-2021-3930		 CWE-193 Medium
No
No
 - 09.12.2021 SB2021120919
SB2021120920
SB2021122221
and 7 more
#VU46134 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-14367		 CWE-59 Medium
No
No
 - 31.08.2020 SB2020083109
SB2020083110
SB2020082303
and 6 more


Showing elements 221 - 240 out of 949