Known vulnerabilities in SUSE Linux Enterprise Desktop 15 SP6 - page 51

Vendor: SUSE
Software: SUSE Linux Enterprise Desktop 15
Version: SP6
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4554
Public exploits: 81
Known exploited (KEV): 22
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop 15 version SP6 SUSE Linux Enterprise Desktop 15 SP6 is affected by 4554 vulnerabilities: 14 critical, 310 high, 553 medium, 3675 low Critical High Medium Low

Vulnerabilities (4554)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833		 CWE-89 High
Public exploit available
No
 - 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU114677 - Out-of-bounds read
CVE-2025-8067		 CWE-125 Low
Public exploit available
No
 - 02.09.2025 SB2025090252
SB2025090254
SB2025090255
and 18 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 57 more
#VU114096 - Improper input validation
CVE-2025-8715		 CWE-20 Medium
No
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 52 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714		 CWE-94 Low
Public exploit available
No
 - 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 60 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU110694 - Improper input validation
CVE-2025-40908		 CWE-20 Medium
No
No
 - 10.06.2025 SB2025061036
SB2025061044
SB2025061173
and 8 more
#VU110253 - Protection Mechanism Failure
CVE-2025-22874		 CWE-693 Low
No
No
 - 07.06.2025 SB2025060702
SB2025061002
SB2025081114
and 18 more
#VU110252 - Improper Link Resolution Before File Access ('Link Following')
CVE-2025-0913		 CWE-59 Low
No
No
 - 07.06.2025 SB2025060702
SB2025061002
SB2025061003
and 8 more
#VU110251 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4673		 CWE-200 Low
No
No
 - 07.06.2025 SB2025060701
SB2025060702
SB2025061002
and 35 more
#VU107469 - Integer overflow
CVE-2025-2760		 CWE-190 High
No
No
 - 16.04.2025 SB2025041618
SB2025050984
SB2025050985
and 4 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-22871		 CWE-444 Medium
No
No
 - 05.04.2025 SB2025040507
SB2025040508
SB2025040739
and 109 more
#VU106253 - Improper input validation
CVE-2025-22870		 CWE-20 Medium
Public exploit available
No
 - 30.03.2025 SB2025033001
SB2025033002
SB2025033003
and 106 more
#VU103932 - Missing release of memory after effective lifetime
CVE-2025-22866		 CWE-401 Low
No
No
 - 12.02.2025 SB20250212100
SB20250212101
SB20250212102
and 27 more
#VU103457 - Improper input validation
CVE-2024-45341		 CWE-20 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 23 more
#VU103455 - Exposure of sensitive information to an unauthorized actor
CVE-2024-45336		 CWE-200 Low
No
No
 - 30.01.2025 SB2025013039
SB2025013043
SB2025013044
and 38 more
#VU37356 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-11509		 CWE-89 High
No
No
 - 28.03.2018 SB2018032829
SB20250908117


Showing elements 1001 - 1020 out of 4554