Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP2 - page 19

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 430
Public exploits: 27
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP2 is affected by 430 vulnerabilities: 7 critical, 57 high, 182 medium, 184 low Critical High Medium Low

Vulnerabilities (430)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63954 - Improper Privilege Management
CVE-2021-20208		 CWE-269 Low
No
No
 - 02.06.2022 SB2021042017
SB2022060218
SB2021041374
and 10 more
#VU59106 - Improper input validation
CVE-2021-30004		 CWE-20 Medium
No
No
 - 29.12.2021 SB2021040206
SB2021040207
SB2021122905
and 6 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 - 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876		 CWE-200 Medium
No
No
 - 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Public exploit available
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1946		 CWE-78 Medium
No
No
 - 24.03.2021 SB2021032412
SB2021032901
SB2021040168
and 10 more
#VU51667 - Memory corruption
CVE-2021-23987		 CWE-119 High
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51664 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-23984		 CWE-451 Medium
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51662 - Exposure of sensitive information to an unauthorized actor
CVE-2021-23982		 CWE-200 Medium
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51661 - Out-of-bounds read
CVE-2021-23981		 CWE-125 Medium
No
No
 - 23.03.2021 SB2021032312
SB2021032313
SB2021032505
and 20 more
#VU51640 - Incorrect Default Permissions
CVE-2021-24032		 CWE-276 High
No
No
 - 23.03.2021 SB2021030435
SB2021032304
SB2021030815
and 4 more
#VU51639 - Incorrect Default Permissions
CVE-2021-24031		 CWE-276 High
No
No
 - 23.03.2021 SB2021030434
SB2021032304
SB2021030815
and 3 more
#VU51442 - Use After Free
CVE-2021-20232		 CWE-416 Low
No
No
 - 14.03.2021 SB2021031401
SB2021031402
SB2021092209
and 21 more
#VU51441 - Use After Free
CVE-2021-20231		 CWE-416 Low
No
No
 - 14.03.2021 SB2021031401
SB2021031402
SB2021092209
and 21 more
#VU50978 - Missing release of memory after effective lifetime
CVE-2021-20193		 CWE-401 Medium
No
No
 - 28.02.2021 SB2021022807
SB2021022808
SB2021052630
and 9 more
#VU50814 - Improper input validation
CVE-2021-23336		 CWE-20 Medium
No
No
 - 19.02.2021 SB2021021907
SB2021022001
SB2021022706
and 56 more
#VU49587 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21261		 CWE-94 Low
No
No
 - 14.01.2021 SB2021011821
SB2021011822
SB2021012105
and 12 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613		 CWE-444 Medium
Public exploit available
No
 - 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more
#VU28538 - Resource exhaustion
CVE-2020-11080		 CWE-400 Medium
No
No
 - 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more
#VU23600 - Improper input validation
CVE-2019-12420		 CWE-20 Medium
No
No
 - 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 7 more


Showing elements 361 - 380 out of 430