Known vulnerabilities in SUSE Linux Enterprise Module for Web Scripting - page 2

Vendor: SUSE
Software: SUSE Linux Enterprise Module for Web Scripting
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_module_for_web_scripting:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 96
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Module for Web Scripting SUSE Linux Enterprise Module for Web Scripting is affected by 96 known vulnerabilities: 13 high, 68 medium, 15 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68887 - Integer overflow
CVE-2022-37454		 CWE-190 High
Available
No
 - 01.11.2022 SB2022110118
SB2022110119
SB2022110209
and 69 more
#VU68886 - Out-of-bounds read
CVE-2022-31630		 CWE-125 Medium
No
No
 - 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU67756 - Security Features
CVE-2022-31629		 CWE-254 Low
Available
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 49 more
#VU67755 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-31628		 CWE-835 Medium
No
No
 - 29.09.2022 SB2022092960
SB2022093041
SB2022101944
and 26 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 - 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949		 CWE-918 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244		 CWE-200 Medium
No
No
 - 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU66201 - Security Features
CVE-2022-2255		 CWE-254 Medium
No
No
 - 09.08.2022 SB2022080904
SB2022080914
SB2022111643
and 6 more
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 - 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU64232 - Use of Uninitialized Resource
CVE-2022-31625		 CWE-908 High
No
No
 - 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 23 more
#VU64231 - Memory corruption
CVE-2022-31626		 CWE-119 High
Available
No
 - 14.06.2022 SB2022061403
SB2022061404
SB2022061529
and 25 more
#VU62312 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-24828		 CWE-78 High
No
No
 - 14.04.2022 SB2022041401
SB2022042017
SB2022090517
and 7 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU56905 - Absolute Path Traversal
CVE-2021-21706		 CWE-36 Medium
No
No
 - 29.09.2021 SB2021092901
SB2021093001
SB2022111831
and 1 more
#VU55101 - Improper Link Resolution Before File Access ('Link Following')
CVE-2021-32610		 CWE-59 High
No
No
 - 20.07.2021 SB2021072062
SB2021072221
SB2021102617
and 12 more
#VU50403 - NULL Pointer Dereference
CVE-2021-21702		 CWE-476 Medium
No
No
 - 07.02.2021 SB2021020704
SB2021020705
SB2021020707
and 19 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 8 more


Showing elements 21 - 40 out of 96