Known vulnerabilities in SUSE Linux Enterprise Module for Public Cloud - page 6

Vendor: SUSE

Software: SUSE Linux Enterprise Module for Public Cloud

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_public_cloud:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 391

Public exploits: 27

Known exploited (KEV): 7

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (391)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68422 - Use After Free CVE-2022-41222	CWE-416	Low	No	No	-	18.10.2022	SB2022101862 SB2022101865 SB2022101866 and 26 more
#VU68340 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-41849	CWE-362	Low	No	No	-	15.10.2022	SB2022101504 SB2022101508 SB2022101867 and 43 more
#VU68339 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2022-41848	CWE-362	Low	No	No	-	15.10.2022	SB2022101503 SB2022101507 SB2022101508 and 16 more
#VU68338 - NULL Pointer Dereference CVE-2022-3303	CWE-476	Low	No	No	-	15.10.2022	SB2022101502 SB2022101507 SB2022101508 and 47 more
#VU68337 - Use After Free CVE-2022-3239	CWE-416	Low	No	No	-	15.10.2022	SB2022101501 SB2022101507 SB2022101508 and 40 more
#VU67810 - NULL Pointer Dereference CVE-2022-3202	CWE-476	Low	No	No	-	03.10.2022	SB2022100328 SB2022100331 SB2022101508 and 8 more
#VU67657 - Use After Free CVE-2022-41218	CWE-416	Low	Available	No	-	26.09.2022	SB2022092660 SB2022101507 SB2022101508 and 81 more
#VU67512 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2016-3695	CWE-74	Low	No	No	-	20.09.2022	SB2017122926 SB2022092046 SB2022092047 and 6 more
#VU67474 - Out-of-bounds write CVE-2022-20369	CWE-787	Low	No	No	-	20.09.2022	SB2022092006 SB2022092007 SB2022092008 and 37 more
#VU67473 - Out-of-bounds read CVE-2022-20368	CWE-125	Low	No	No	-	19.09.2022	SB2022092006 SB2022092007 SB2022092008 and 44 more
#VU66811 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-36516	CWE-327	Medium	No	No	-	29.08.2022	SB2022022601 SB2022082925 SB2022082926 and 40 more
#VU66810 - Permissions, Privileges, and Access Controls CVE-2022-2503	CWE-264	Low	No	No	-	29.08.2022	SB2022082921 SB2022082923 SB2022090218 and 38 more
#VU66549 - Permissions, Privileges, and Access Controls CVE-2022-26373	CWE-264	Low	No	No	-	16.08.2022	SB2022081642 SB2022081647 SB2022081745 and 64 more
#VU66397 - Double Free CVE-2022-2588	CWE-415	Low	Available	Exploited	-	11.08.2022	SB2022081109 SB2022081110 SB2022081111 and 99 more
#VU66396 - Use After Free CVE-2022-2586	CWE-416	Low	Available	Exploited	-	11.08.2022	SB2022081108 SB2022081110 SB2022081111 and 53 more
#VU66394 - Resource Management Errors CVE-2022-2585	CWE-399	Low	Available	No	-	11.08.2022	SB2022081107 SB2022081114 SB2022081115 and 21 more
#VU64074 - NULL Pointer Dereference CVE-2022-1263	CWE-476	Low	No	No	-	08.06.2022	SB2022060826 SB2022051043 SB2022101508 and 3 more
#VU63535 - Resource exhaustion CVE-2021-33135	CWE-400	Low	No	No	-	23.05.2022	SB2022052314 SB2022092047 SB2022092049 and 2 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-29217	CWE-327	Medium	No	No	-	13.05.2022	SB2022051319 SB2022071428 SB2022071429 and 12 more
#VU48793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27783	CWE-79	Medium	No	No	-	03.12.2020	SB2020120602 SB2020120603 SB2020121305 and 20 more

Showing elements 101 - 120 out of 391

Known vulnerabilities in SUSE Linux Enterprise Module for Public Cloud - page 6

Breakdown by Severity Chart

Vulnerabilities (391)

Please verify you're human