Known vulnerabilities in SUSE Linux Enterprise High Availability Extension 15 SP4 - page 147

Vendor: SUSE
Software: SUSE Linux Enterprise High Availability Extension 15
Version: SP4
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2970
Public exploits: 40
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise High Availability Extension 15 version SP4 SUSE Linux Enterprise High Availability Extension 15 SP4 is affected by 2970 vulnerabilities: 1 critical, 17 high, 92 medium, 2860 low Critical High Medium Low

Vulnerabilities (2970)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75997 - Use After Free
CVE-2023-2235		 CWE-416 Low
No
No
 - 10.05.2023 SB2023051051
SB2023051054
SB2023051057
and 37 more
#VU75996 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-30772		 CWE-362 Low
No
No
 - 10.05.2023 SB2023051050
SB2023051052
SB2023051053
and 42 more
#VU75205 - Use After Free
CVE-2023-1838		 CWE-416 Low
No
No
 - 18.04.2023 SB2023041828
SB2023041830
SB2023041831
and 28 more
#VU75204 - Use After Free
CVE-2023-1611		 CWE-416 Low
No
No
 - 18.04.2023 SB2023041827
SB2023041830
SB2023041831
and 49 more
#VU74772 - NULL Pointer Dereference
CVE-2023-28327		 CWE-476 Low
No
No
 - 10.04.2023 SB2023041038
SB2023041040
SB2023041041
and 26 more
#VU74771 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2023-1637		 CWE-1342 Low
No
No
 - 10.04.2023 SB2023041037
SB2023041041
SB2023041830
and 30 more
#VU74770 - Use After Free
CVE-2023-1652		 CWE-416 Low
No
No
 - 10.04.2023 SB2023041036
SB2023041041
SB2023041830
and 31 more
#VU74630 - Improper Initialization
CVE-2023-1513		 CWE-665 Low
No
No
 - 10.04.2023 SB2023041034
SB2023041039
SB2023041040
and 54 more
#VU74629 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-1582		 CWE-362 Low
No
No
 - 10.04.2023 SB2023041033
SB2023041040
SB2023041041
and 27 more
#VU74628 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-28466		 CWE-362 Low
No
No
 - 10.04.2023 SB2023041032
SB2023041040
SB2023041041
and 79 more
#VU74147 - Double Free
CVE-2023-28464		 CWE-415 Low
No
No
 - 28.03.2023 SB2023032870
SB2023041039
SB2023041040
and 51 more
#VU74129 - Return of pointer value outside of expected range
CVE-2023-23001		 CWE-466 Low
No
No
 - 28.03.2023 SB2023032827
SB2023032848
SB2023041830
and 5 more
#VU74122 - Use After Free
CVE-2023-1281		 CWE-416 Low
No
No
 - 28.03.2023 SB2023032818
SB2023032832
SB2023032833
and 85 more
#VU74053 - Double Free
CVE-2022-4744		 CWE-415 Low
No
No
 - 27.03.2023 SB2023032732
SB2023032734
SB2023032735
and 52 more
#VU73770 - NULL Pointer Dereference
CVE-2023-23006		 CWE-476 Low
No
No
 - 16.03.2023 SB2023031660
SB2023031663
SB2023031664
and 11 more
#VU71352 - NULL Pointer Dereference
CVE-2023-0394		 CWE-476 Low
No
No
 - 19.01.2023 SB2023011912
SB2023012450
SB2023022176
and 68 more
#VU68961 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-27777		 CWE-79 Low
No
No
 - 03.11.2022 SB2022110317
SB2022110319
SB2022110320
and 2 more
#VU46724 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-15169		 CWE-79 Low
No
No
 - 11.09.2020 SB2020091507
SB2020092504
SB2023042728
and 3 more
#VU28241 - Cross-Site Request Forgery (CSRF)
CVE-2020-8167		 CWE-352 Low
No
No
 - 26.05.2020 SB2020052603
SB2020092504
SB2023042728
#VU9884 - Exposure of sensitive information to an unauthorized actor
CVE-2017-5753		 CWE-200 Low
Public exploit available
Exploited
 - 09.01.2018 SB2018010416
SB2018010502
SB2018010903
and 92 more


Showing elements 2921 - 2940 out of 2970