Known vulnerabilities in SUSE Linux Enterprise Server 15-SP3-LTSS - page 10

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 15-SP3-LTSS

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 726

Public exploits: 37

Known exploited (KEV): 9

Vulnerabilities by Severity

Vulnerabilities (726)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82944 - UNIX Symbolic Link (Symlink) Following CVE-2023-34049	CWE-61	Low	No	No	-	09.11.2023	SB2023110931 SB2023110932 SB2023110933 and 17 more
#VU80472 - Permissions, Privileges, and Access Controls CVE-2023-20898	CWE-264	Low	No	No	-	05.09.2023	SB2023090559 SB2023090563 SB2023090601 and 13 more
#VU80471 - Improper input validation CVE-2023-20897	CWE-20	Medium	No	No	-	05.09.2023	SB2023090559 SB2023090563 SB2023090601 and 14 more
#VU78913 - Improper Certificate Validation CVE-2023-29409	CWE-295	Medium	No	No	-	03.08.2023	SB2023080320 SB2023080321 SB2023080370 and 98 more
#VU78470 - Missing Authorization CVE-2023-2183	CWE-862	Low	No	No	-	20.07.2023	SB20230720110 SB20230720114 SB20230720115 and 9 more
#VU77623 - Improper Synchronization CVE-2023-2801	CWE-662	Medium	No	No	-	22.06.2023	SB2023062244 SB20230720114 SB20230720115 and 8 more
#VU77620 - Exposure of sensitive information to an unauthorized actor CVE-2023-1387	CWE-200	Medium	No	No	-	22.06.2023	SB2023062227 SB2023062230 SB2023062231 and 7 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2023-28370	CWE-601	Medium	No	No	-	22.05.2023	SB2023052204 SB2023061333 SB2023062257 and 28 more
#VU75360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-1410	CWE-79	Low	No	No	-	19.04.2023	SB2023041950 SB2023041951 SB2023041952 and 11 more
#VU75359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-0594	CWE-79	Low	No	No	-	19.04.2023	SB2023041949 SB2023041951 SB2023041952 and 6 more
#VU73108 - Covert Timing Channel CVE-2020-25658	CWE-385	Low	No	No	-	07.03.2023	SB2020111232 SB2023030749 SB2022111045 and 7 more
#VU69399 - NULL Pointer Dereference CVE-2022-2476	CWE-476	Low	No	No	-	17.11.2022	SB2022071110 SB2022111720 SB2022080543 and 7 more
#VU68860 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-31163	CWE-22	Medium	No	No	-	31.10.2022	SB2022103147 SB2022103161 SB2022072942 and 6 more
#VU65824 - Missing release of memory after effective lifetime CVE-2022-32742	CWE-401	Low	No	No	-	27.07.2022	SB2022072721 SB2022072728 SB2022072922 and 36 more
#VU63945 - Out-of-bounds read CVE-2022-1586	CWE-125	Medium	No	No	-	02.06.2022	SB2022060210 SB2022071156 SB2022071217 and 71 more
#VU63630 - Resource exhaustion CVE-2022-0669	CWE-400	Low	No	No	-	25.05.2022	SB2022052515 SB2022050438 SB2022053026 and 5 more
#VU63625 - Out-of-bounds write CVE-2021-3839	CWE-787	Low	No	No	-	25.05.2022	SB2022052516 SB2022050438 SB2022053026 and 7 more
#VU63126 - Permissions, Privileges, and Access Controls CVE-2022-1552	CWE-264	Medium	No	No	-	12.05.2022	SB2022051213 SB2022051303 SB2022051304 and 48 more
#VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191	CWE-327	Medium	No	No	-	10.04.2022	SB2022041004 SB2022041406 SB2022081226 and 91 more
#VU30626 - Improper Link Resolution Before File Access ('Link Following') CVE-2019-18658	CWE-59	High	No	No	-	12.11.2019	SB2019111225 SB2022053137

Showing elements 181 - 200 out of 726

Known vulnerabilities in SUSE Linux Enterprise Server 15-SP3-LTSS - page 10

Vulnerabilities by Severity

Vulnerabilities (726)

Please verify you're human