Known vulnerabilities in SUSE Linux Enterprise Module for Server Applications 15-SP2 - page 4

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Server Applications
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 114
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Server Applications version 15-SP2 SUSE Linux Enterprise Module for Server Applications 15-SP2 is affected by 114 vulnerabilities: 2 critical, 18 high, 65 medium, 29 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58292 - Command injection
CVE-2021-31607		 CWE-77 Low
No
No
 - 23.11.2021 SB2021042332
SB2021112302
SB2021052114
and 24 more
#VU53778 - NULL Pointer Dereference
CVE-2020-13950		 CWE-476 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 15 more
#VU53777 - NULL Pointer Dereference
CVE-2021-26690		 CWE-476 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 17 more
#VU53776 - NULL Pointer Dereference
CVE-2021-26691		 CWE-476 Low
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 26 more
#VU53775 - Stack-based buffer overflow
CVE-2020-35452		 CWE-121 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 19 more
#VU53774 - Improper input validation
CVE-2021-30641		 CWE-20 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53773 - NULL Pointer Dereference
CVE-2021-31618		 CWE-476 Medium
No
No
 - 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU53233 - Missing release of memory after effective lifetime
CVE-2021-32029		 CWE-401 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 18 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU53019 - Missing release of memory after effective lifetime
CVE-2021-28652		 CWE-401 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 10 more
#VU53018 - Improper input validation
CVE-2021-28662		 CWE-20 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 9 more
#VU53017 - Improper input validation
CVE-2021-28651		 CWE-20 Medium
No
No
 - 10.05.2021 SB2021051025
SB2021051925
SB2021052636
and 14 more
#VU51588 - Incorrect Implementation of Authentication Algorithm
CVE-2021-25315		 CWE-303 Low
No
No
 - 22.03.2021 SB2021032203
SB2021062235
SB2021062236
and 8 more
#VU51248 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25097		 CWE-444 Medium
No
No
 - 08.03.2021 SB2021030801
SB2021032504
SB2021041206
and 16 more
#VU48206 - Improper Authentication
CVE-2020-25592		 CWE-287 High
Public exploit available
No
 - 06.11.2020 SB2020110934
SB2020110935
SB2020110936
and 11 more
#VU27495 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-11652		 CWE-22 Medium
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more
#VU27494 - Improper Authentication
CVE-2020-11651		 CWE-287 Critical
Public exploit available
Exploited
 - 04.05.2020 SB2020050410
SB2020050417
SB2020050506
and 10 more
#VU15545 - Command injection
CVE-2018-15751		 CWE-77 Low
No
No
 - 26.10.2018 SB2018102608
SB2018121816
SB2018122002
and 6 more
#VU15544 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-15750		 CWE-22 Low
No
No
 - 25.10.2018 SB2018102608
SB2018121816
SB2018122002
and 6 more


Showing elements 61 - 80 out of 114