Known vulnerabilities in SUSE Linux Enterprise Module for Server Applications 15-SP3 - page 12

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Server Applications
Version: 15-SP3
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_server_applications:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 279
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Server Applications version 15-SP3 SUSE Linux Enterprise Module for Server Applications 15-SP3 is affected by 279 vulnerabilities: 1 critical, 36 high, 127 medium, 115 low Critical High Medium Low

Vulnerabilities (279)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79695 - Use of Externally-Controlled Format String
CVE-2021-32785		 CWE-134 Medium
No
No
 - 18.08.2023 SB2021072603
SB2021091342
SB2021101271
and 1 more
#VU79694 - Use of Insufficiently Random Values
CVE-2021-32791		 CWE-330 Low
No
No
 - 18.08.2023 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU79693 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-32786		 CWE-601 Low
No
No
 - 18.08.2023 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU77293 - Memory corruption
CVE-2021-3746		 CWE-119 Medium
No
No
 - 14.06.2023 SB2023061426
SB2022060240
SB2021090933
and 2 more
#VU59043 - Missing release of memory after effective lifetime
CVE-2021-3677		 CWE-401 Low
No
No
 - 16.12.2021 SB2021121641
SB2021121642
SB2021121643
and 17 more
#VU56828 - NULL Pointer Dereference
CVE-2021-37750		 CWE-476 Medium
No
No
 - 22.09.2021 SB2021092223
SB2021092224
SB2021092811
and 26 more
#VU56680 - Out-of-bounds read
CVE-2021-36160		 CWE-125 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 22 more
#VU56679 - Memory corruption
CVE-2021-39275		 CWE-119 Medium
No
No
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Public exploit available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU56474 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33193		 CWE-444 Medium
No
No
 - 13.09.2021 SB2021091317
SB2021091707
SB2021092301
and 24 more
#VU55451 - Integer overflow
CVE-2021-37600		 CWE-190 High
No
No
 - 30.07.2021 SB2021073009
SB2021101949
SB2021102015
and 11 more
#VU55291 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32792		 CWE-79 Low
No
No
 - 26.07.2021 SB2021072603
SB2023081884
SB2022051064
and 6 more
#VU55091 - Improper input validation
CVE-2021-2372		 CWE-20 Low
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 28 more
#VU55062 - Improper input validation
CVE-2021-2389		 CWE-20 Medium
No
No
 - 20.07.2021 SB2021072058
SB2021092222
SB2021101334
and 23 more
#VU54573 - Memory corruption
CVE-2021-3570		 CWE-119 High
No
No
 - 06.07.2021 SB2021070615
SB2021070617
SB2021070618
and 15 more
#VU54450 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32718		 CWE-79 Low
No
No
 - 30.06.2021 SB2021063001
SB2021070609
SB2021101002
and 5 more
#VU54421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32719		 CWE-79 Low
No
No
 - 28.06.2021 SB2021062815
SB2021070609
SB2021101002
and 4 more
#VU53724 - Improper input validation
CVE-2021-22116		 CWE-20 Medium
No
No
 - 01.06.2021 SB2021060141
SB2021060142
SB2021101002
and 3 more
#VU50457 - Out-of-bounds read
CVE-2021-28116		 CWE-125 Medium
No
No
 - 09.02.2021 SB2021100402
SB2022051154
SB2021101120
and 7 more
#VU45671 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-12100		 CWE-835 Medium
No
No
 - 13.08.2020 SB2020081309
SB2020081310
SB2020081917
and 16 more


Showing elements 221 - 240 out of 279