Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP2 - page 14

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 430
Public exploits: 27
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP2 is affected by 430 vulnerabilities: 7 critical, 57 high, 182 medium, 184 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114318 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-3524		 CWE-113 Low
No
No
 - 21.08.2025 SB2021051735
SB2025082110
SB2021051423
and 7 more
#VU87989 - Out-of-bounds write
CVE-2021-33200		 CWE-787 Low
No
No
 - 02.04.2024 SB2024040237
SB2024061216
SB2024073031
and 27 more
#VU68301 - Out-of-bounds write
CVE-2021-3491		 CWE-787 Low
No
No
 - 13.10.2022 SB2021060425
SB2021060856
SB2021060857
and 15 more
#VU65859 - Resource exhaustion
CVE-2020-29651		 CWE-400 Medium
No
No
 - 28.07.2022 SB2022072916
SB2022081723
SB2022093029
and 8 more
#VU63657 - Use After Free
CVE-2021-23134		 CWE-416 Low
No
No
 - 25.05.2022 SB2021061830
SB2021072073
SB2024070825
and 33 more
#VU55257 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-32399		 CWE-362 Low
No
No
 - 22.07.2021 SB2021051144
SB2021072247
SB2021072248
and 58 more
#VU54454 - Use After Free
CVE-2021-33034		 CWE-416 Low
No
No
 - 30.06.2021 SB2021063013
SB2021063014
SB2021063015
and 55 more
#VU53837 - Permissions, Privileges, and Access Controls
CVE-2021-3560		 CWE-264 Low
Public exploit available
Exploited
 - 07.06.2021 SB2021060707
SB2021060712
SB2021060714
and 18 more
#VU53609 - Improper input validation
CVE-2021-25217		 CWE-20 Medium
No
No
 - 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU53587 - Use of Uninitialized Variable
CVE-2021-22898		 CWE-457 Medium
No
No
 - 26.05.2021 SB2021052620
SB2021052711
SB2021060128
and 47 more
#VU53311 - Improper input validation
CVE-2021-3531		 CWE-20 Medium
No
No
 - 17.05.2021 SB2021051713
SB2021051423
SB2021051424
and 4 more
#VU53310 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3509		 CWE-79 Low
No
No
 - 17.05.2021 SB2021051712
SB2021051423
SB2021060252
and 1 more
#VU53176 - Improper input validation
CVE-2020-26141		 CWE-20 Low
No
No
 - 12.05.2021 SB2021051212
SB2021051810
SB2021051811
and 27 more
#VU53174 - Improper input validation
CVE-2020-26139		 CWE-20 Low
No
No
 - 12.05.2021 SB2021051212
SB2021051810
SB2021051811
and 30 more
#VU53172 - Improper input validation
CVE-2020-26147		 CWE-20 Low
No
No
 - 12.05.2021 SB2021051212
SB2021051810
SB2021051811
and 31 more
#VU53155 - Improper input validation
CVE-2020-26145		 CWE-20 Low
No
No
 - 12.05.2021 SB2021051212
SB2021051810
SB2021051811
and 28 more
#VU53098 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-24588		 CWE-451 Low
No
No
 - 11.05.2021 SB2021051118
SB2021051227
SB2021051708
and 55 more
#VU50989 - Resource exhaustion
CVE-2021-21240		 CWE-400 Medium
No
No
 - 28.02.2021 SB2021022811
SB2021022814
SB2021051932
and 6 more
#VU49938 - Stack-based buffer overflow
CVE-2021-3185		 CWE-121 High
No
No
 - 24.01.2021 SB2021012404
SB2021012405
SB2021060149
and 6 more
#VU28245 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2020-11078		 CWE-93 Low
No
No
 - 26.05.2020 SB2020052606
SB2020090111
SB2020110521
and 15 more


Showing elements 261 - 280 out of 430