Known vulnerabilities in SUSE Linux Enterprise Desktop 15 SP7 - page 246

Vendor: SUSE
Software: SUSE Linux Enterprise Desktop 15
Version: SP7
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_desktop_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 5835
Public exploits: 87
Known exploited (KEV): 18

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Desktop 15 version SP7 SUSE Linux Enterprise Desktop 15 SP7 is affected by 5835 vulnerabilities: 10 critical, 508 high, 1328 medium, 3988 low Critical High Medium Low

Vulnerabilities (5835)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833		 CWE-89 High
Public exploit available
No
 - 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU114677 - Out-of-bounds read
CVE-2025-8067		 CWE-125 Low
Public exploit available
No
 - 02.09.2025 SB2025090252
SB2025090254
SB2025090255
and 18 more
#VU114390 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-9183		 CWE-451 Medium
No
No
 - 22.08.2025 SB2025081946
SB2025082839
SB2025082840
and 5 more
#VU114389 - Resource exhaustion
CVE-2025-9182		 CWE-400 Low
No
No
 - 22.08.2025 SB2025081946
SB2025082301
SB2025082303
and 28 more
#VU114387 - Use of Uninitialized Variable
CVE-2025-9181		 CWE-457 High
No
No
 - 22.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 57 more
#VU114227 - Memory corruption
CVE-2025-9180		 CWE-119 High
No
No
 - 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114225 - Memory corruption
CVE-2025-9179		 CWE-119 High
No
No
 - 19.08.2025 SB2025081946
SB2025082223
SB2025082301
and 33 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU112646 - Product UI does not Warn User of Unsafe Actions
CVE-2025-46835		 CWE-356 Medium
No
No
 - 09.07.2025 SB2025070994
SB20250709121
SB2025071019
and 24 more
#VU112643 - Improper input validation
CVE-2025-27614		 CWE-20 High
No
No
 - 09.07.2025 SB2025070994
SB20250709119
SB2025071019
and 20 more
#VU112642 - Protection Mechanism Failure
CVE-2025-27613		 CWE-693 High
No
No
 - 09.07.2025 SB2025070994
SB20250709122
SB2025071019
and 22 more
#VU112638 - Improper input validation
CVE-2025-48385		 CWE-20 High
No
No
 - 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 38 more
#VU112637 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-48384		 CWE-93 Medium
Public exploit available
Exploited
 - 09.07.2025 SB2025070989
SB2025070990
SB2025070991
and 54 more
#VU110694 - Improper input validation
CVE-2025-40908		 CWE-20 Medium
No
No
 - 10.06.2025 SB2025061036
SB2025061044
SB2025061173
and 8 more
#VU107469 - Integer overflow
CVE-2025-2760		 CWE-190 High
No
No
 - 16.04.2025 SB2025041618
SB2025050984
SB2025050985
and 4 more
#VU37356 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-11509		 CWE-89 High
No
No
 - 28.03.2018 SB2018032829
SB20250908117


Showing elements 4901 - 4920 out of 5835