Known vulnerabilities in SUSE Linux Enterprise Server 15-SP4 - page 26

Vendor: SUSE

Software: SUSE Linux Enterprise Server

Version: 15-SP4

Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*

Website: https://www.suse.com/

Total vulnerabilities: 1220

Public exploits: 45

Known exploited (KEV): 8

Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Vulnerabilities (1220)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916	CWE-319	Medium	No	No	-	26.10.2022	SB2022102624 SB2022102662 SB2022102703 and 27 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	-	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU68551 - Use After Free CVE-2022-0216	CWE-416	Medium	No	No	-	20.10.2022	SB2022102077 SB2022102082 SB2022102091 and 12 more
#VU67971 - Use After Free CVE-2022-42012	CWE-416	Low	No	No	-	06.10.2022	SB2022100645 SB2022100708 SB2022102733 and 57 more
#VU67970 - Out-of-bounds read CVE-2022-42011	CWE-125	Low	No	No	-	06.10.2022	SB2022100645 SB2022100708 SB2022102733 and 57 more
#VU67969 - Reachable Assertion CVE-2022-42010	CWE-617	Low	No	No	-	06.10.2022	SB2022100645 SB2022100708 SB2022102733 and 58 more
#VU67777 - NULL Pointer Dereference CVE-2022-39028	CWE-476	Medium	No	No	-	30.09.2022	SB2022093027 SB2022093028 SB2022102638 and 12 more
#VU67550 - Missing release of memory after effective lifetime CVE-2022-38178	CWE-401	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092147 and 48 more
#VU67549 - Missing release of memory after effective lifetime CVE-2022-38177	CWE-401	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092143 and 52 more
#VU67548 - Improper input validation CVE-2022-3080	CWE-20	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092147 and 18 more
#VU67545 - Resource Management Errors CVE-2022-2795	CWE-399	Medium	No	No	-	21.09.2022	SB2022092131 SB2022092140 SB2022092143 and 71 more
#VU65354 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31097	CWE-79	Low	No	No	-	15.07.2022	SB2022071510 SB2022102094 SB2022102641 and 16 more
#VU65353 - Improper Authentication CVE-2022-31107	CWE-287	High	No	No	-	15.07.2022	SB2022071510 SB2022072642 SB2022072643 and 21 more
#VU64399 - Cross-Site Request Forgery (CSRF) CVE-2022-21703	CWE-352	Medium	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-21702	CWE-79	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key CVE-2022-21713	CWE-639	Low	No	No	-	15.06.2022	SB2022061621 SB2022062026 SB2022102094 and 13 more
#VU49185 - Heap-based Buffer Overflow CVE-2020-27814	CWE-122	High	No	No	-	29.12.2020	SB2020122906 SB2020122920 SB2021012622 and 15 more
#VU49183 - Heap-based Buffer Overflow CVE-2020-27841	CWE-122	High	No	No	-	29.12.2020	SB2020122906 SB2021012622 SB2021040622 and 12 more
#VU12403 - Improper input validation CVE-2017-8372	CWE-20	Low	No	No	-	08.05.2018	SB2018050803 SB2019081102 SB2022102664
#VU12404 - Heap-based Buffer Overflow CVE-2017-8373	CWE-122	Low	No	No	-	05.05.2018	SB2018050803 SB2019081103 SB2022102664

Showing elements 501 - 520 out of 1220

Known vulnerabilities in SUSE Linux Enterprise Server 15-SP4 - page 26

Vulnerabilities by Severity

Vulnerabilities (1220)

Please verify you're human