Known vulnerabilities in SUSE Linux Enterprise Module for Basesystem 15-SP3 - page 33

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Basesystem
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_basesystem:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1240
Public exploits: 49
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Basesystem version 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP3 is affected by 1240 vulnerabilities: 13 critical, 264 high, 393 medium, 570 low Critical High Medium Low

Vulnerabilities (1240)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 - 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU65086 - Out-of-bounds read
CVE-2021-44269		 CWE-125 Low
No
No
 - 11.07.2022 SB2022071110
SB2022071111
SB2022110849
and 9 more
#VU63065 - Use After Free
CVE-2021-3796		 CWE-416 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 21 more
#VU63063 - Heap-based Buffer Overflow
CVE-2021-3778		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021092817
SB2022062022
and 22 more
#VU63059 - Heap-based Buffer Overflow
CVE-2021-3872		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 21 more
#VU63057 - Heap-based Buffer Overflow
CVE-2021-3927		 CWE-122 High
No
No
 - 11.05.2022 SB2022051173
SB2021111514
SB2022062022
and 23 more
#VU61830 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-25255		 CWE-94 Low
No
No
 - 04.04.2022 SB2022021640
SB2022040411
SB2022110842
and 15 more
#VU61608 - Improper Authentication
CVE-2022-0547		 CWE-287 Medium
No
No
 - 24.03.2022 SB2022032420
SB2022032423
SB2022040412
and 17 more
#VU61566 - Exposure of sensitive information to an unauthorized actor
CVE-2021-26401		 CWE-200 Low
No
No
 - 23.03.2022 SB2022032309
SB2022051728
SB2022051831
and 30 more
#VU61492 - Incorrect Default Permissions
CVE-2022-0358		 CWE-276 Low
No
No
 - 21.03.2022 SB2022032112
SB2022032120
SB2022032121
and 13 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220		 CWE-350 Medium
No
No
 - 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU61199 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0002		 CWE-200 Low
No
No
 - 09.03.2022 SB2022030908
SB2022031106
SB2022031401
and 33 more
#VU61198 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0001		 CWE-200 Low
No
No
 - 09.03.2022 SB2022030908
SB2022031106
SB2022031401
and 47 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 - 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60733 - Improper input validation
CVE-2022-25236		 CWE-20 Medium
No
No
 - 21.02.2022 SB2022022109
SB2022022113
SB2022022411
and 109 more
#VU60188 - Untrusted Search Path
CVE-2022-23853		 CWE-426 Low
No
No
 - 31.01.2022 SB2022013113
SB2022031532
SB2024011532
and 2 more
#VU59459 - Use After Free
CVE-2021-36976		 CWE-416 Medium
No
No
 - 11.01.2022 SB2021072064
SB2022011140
SB2022031433
and 13 more
#VU58812 - Off-by-one Error
CVE-2021-3930		 CWE-193 Medium
No
No
 - 09.12.2021 SB2021120919
SB2021120920
SB2021122221
and 7 more
#VU46134 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-14367		 CWE-59 Medium
No
No
 - 31.08.2020 SB2020083109
SB2020083110
SB2020082303
and 6 more
#VU33268 - Out-of-bounds read
CVE-2017-5601		 CWE-125 Medium
No
No
 - 28.01.2017 SB2017012808
SB2017020106
SB2022061550
and 4 more


Showing elements 641 - 660 out of 1240