Known vulnerabilities in SUSE Linux Enterprise Server 15-LTSS - page 9

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 15-LTSS

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 1299

Public exploits: 51

Known exploited (KEV): 19

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (1299)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68858 - Off-by-one Error CVE-2021-46848	CWE-193	Medium	No	No	-	31.10.2022	SB2022103141 SB2022103142 SB2022103143 and 84 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	-	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU68722 - Improper Authorization CVE-2022-41974	CWE-285	Low	No	No	-	26.10.2022	SB2022102601 SB2022102602 SB2022102603 and 43 more
#VU68416 - Missing release of memory after effective lifetime CVE-2022-3551	CWE-401	Low	No	No	-	18.10.2022	SB2022101844 SB2022101847 SB2022110129 and 28 more
#VU68415 - Memory corruption CVE-2022-3550	CWE-119	Low	No	No	-	18.10.2022	SB2022101844 SB2022101847 SB2022110129 and 27 more
#VU68405 - Security Features CVE-2022-42927	CWE-254	Medium	No	No	-	18.10.2022	SB2022101840 SB2022101877 SB2022102007 and 30 more
#VU67777 - NULL Pointer Dereference CVE-2022-39028	CWE-476	Medium	No	No	-	30.09.2022	SB2022093027 SB2022093028 SB2022102638 and 12 more
#VU67550 - Missing release of memory after effective lifetime CVE-2022-38178	CWE-401	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092147 and 48 more
#VU67549 - Missing release of memory after effective lifetime CVE-2022-38177	CWE-401	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092143 and 52 more
#VU67545 - Resource Management Errors CVE-2022-2795	CWE-399	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092143 and 71 more
#VU67414 - Improper Validation of Array Index CVE-2022-35737	CWE-129	Medium	Public exploit available	No	-	15.09.2022	SB2022091537 SB2022092034 SB2022092682 and 72 more
#VU66881 - Improper input validation CVE-2022-35252	CWE-20	Medium	No	No	-	31.08.2022	SB2022083106 SB2022090108 SB2022090217 and 55 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31097	CWE-79	Low	No	No	-	15.07.2022	SB2022071510 SB2022102094 SB2022102641 and 16 more
#VU65353 - Improper Authentication CVE-2022-31107	CWE-287	High	No	No	-	15.07.2022	SB2022071510 SB2022072642 SB2022072643 and 21 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813	CWE-611	Medium	No	No	-	29.03.2022	SB2021061628 SB2022032929 SB2022032930 and 39 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-24761	CWE-444	Medium	No	No	-	21.03.2022	SB2022032107 SB2022040525 SB2022040622 and 12 more
#VU49185 - Heap-based Buffer Overflow CVE-2020-27814	CWE-122	High	No	No	-	29.12.2020	SB2020122906 SB2020122920 SB2021012622 and 15 more
#VU49183 - Heap-based Buffer Overflow CVE-2020-27841	CWE-122	High	No	No	-	29.12.2020	SB2020122906 SB2021012622 SB2021040622 and 12 more
#VU12403 - Improper input validation CVE-2017-8372	CWE-20	Low	No	No	-	08.05.2018	SB2018050803 SB2019081102 SB2022102664
#VU12404 - Heap-based Buffer Overflow CVE-2017-8373	CWE-122	Low	No	No	-	05.05.2018	SB2018050803 SB2019081103 SB2022102664

Showing elements 161 - 180 out of 1299

Known vulnerabilities in SUSE Linux Enterprise Server 15-LTSS - page 9

Vulnerabilities by Severity

Vulnerabilities (1299)

Please verify you're human