Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP3 - page 21

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1240
Public exploits: 49
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 is affected by 1240 vulnerabilities: 13 critical, 264 high, 393 medium, 570 low Critical High Medium Low

Vulnerabilities (1240)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65223 - Out-of-bounds write
CVE-2022-2320		 CWE-787 Low
No
No
 - 13.07.2022 SB2022071303
SB2022071304
SB2022071305
and 28 more
#VU65222 - Out-of-bounds write
CVE-2022-2319		 CWE-787 Low
No
No
 - 13.07.2022 SB2022071303
SB2022071304
SB2022071305
and 25 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64685 - Improper Verification of Cryptographic Signature
CVE-2022-32208		 CWE-347 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 73 more
#VU64682 - Resource exhaustion
CVE-2022-32206		 CWE-400 Medium
No
No
 - 27.06.2022 SB2022062711
SB2022062724
SB2022062816
and 80 more
#VU64660 - Improper Authentication
CVE-2022-22967		 CWE-287 Low
No
No
 - 24.06.2022 SB2022062428
SB2022062430
SB2022062441
and 13 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 - 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 - 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Public exploit available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-4207		 CWE-362 Low
No
No
 - 30.05.2022 SB2022061333
SB2022062124
SB2022070437
and 9 more
#VU63787 - Integer overflow
CVE-2021-4206		 CWE-190 Low
No
No
 - 30.05.2022 SB2022061333
SB2022062124
SB2022070437
and 9 more
#VU63786 - Improper Resource Shutdown or Release
CVE-2022-26354		 CWE-404 Low
No
No
 - 30.05.2022 SB2022061333
SB2022062124
SB2022070437
and 10 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-29217		 CWE-327 Medium
No
No
 - 13.05.2022 SB2022051319
SB2022071428
SB2022071429
and 12 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Public exploit available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more


Showing elements 401 - 420 out of 1240