Known vulnerabilities in SUSE Linux Enterprise Server - page 111

Vendor: SUSE
Software: SUSE Linux Enterprise Server
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 2790
Public exploits: 134
Known exploited (KEV): 42

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server SUSE Linux Enterprise Server is affected by 2790 known vulnerabilities: 21 critical, 563 high, 1063 medium, 1143 low Critical High Medium Low

Vulnerabilities (2790)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67476 - Heap-based Buffer Overflow
CVE-2022-2991		 CWE-122 Low
No
No
 - 20.09.2022 SB2022092002
SB2022092006
SB2022092010
and 17 more
#VU67361 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-39360		 CWE-300 Medium
No
No
 - 14.09.2022 SB2021082208
SB2022091458
SB2022091459
and 4 more
#VU67277 - Out-of-bounds read
CVE-2022-37032		 CWE-125 Medium
Available
No
 - 13.09.2022 SB2022091376
SB2022091378
SB2022101848
and 10 more
#VU67275 - Missing release of memory after effective lifetime
CVE-2019-25074		 CWE-401 Medium
No
No
 - 13.09.2022 SB2022091376
SB2022091378
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949		 CWE-918 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150		 CWE-93 Medium
No
No
 - 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more
#VU66990 - NULL Pointer Dereference
CVE-2022-2850		 CWE-476 Medium
No
No
 - 06.09.2022 SB2022090601
SB2022090606
SB2022091702
and 11 more
#VU66922 - Improper input validation
CVE-2022-36059		 CWE-20 Low
No
No
 - 01.09.2022 SB2022090140
SB2022090306
SB2022090669
and 11 more
#VU66921 - Security Features
CVE-2022-3034		 CWE-254 Medium
No
No
 - 01.09.2022 SB2022090140
SB2022090669
SB2022091542
and 11 more
#VU66920 - Security Features
CVE-2022-3032		 CWE-254 Low
No
No
 - 01.09.2022 SB2022090140
SB2022090669
SB2022091542
and 11 more
#VU66919 - Exposure of sensitive information to an unauthorized actor
CVE-2022-3033		 CWE-200 Medium
No
No
 - 01.09.2022 SB2022090140
SB2022090669
SB2022091542
and 13 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244		 CWE-200 Medium
No
No
 - 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU64769 - Improper Verification of Cryptographic Signature
CVE-2022-2226		 CWE-347 Low
No
No
 - 29.06.2022 SB2022062903
SB2022070102
SB2022070103
and 15 more
#VU63881 - Security Features
CVE-2022-31744		 CWE-254 Medium
No
No
 - 31.05.2022 SB2022053116
SB2022061323
SB2022062901
and 32 more
#VU58365 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-41819		 CWE-451 Medium
No
No
 - 25.11.2021 SB2021112503
SB2022011920
SB2022020413
and 21 more
#VU54940 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3602		 CWE-200 Low
No
No
 - 19.07.2021 SB2021071902
SB2021072007
SB2022092037
and 7 more
#VU49587 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21261		 CWE-94 Low
No
No
 - 14.01.2021 SB2021011821
SB2021011822
SB2021012105
and 12 more
#VU31897 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2020-14001		 CWE-74 High
No
No
 - 27.07.2020 SB2020072739
SB2020081409
SB2020061736
and 8 more
#VU6900 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-6512		 CWE-362 Low
No
No
 - 05.06.2017 SB2017060503
SB2017060504
SB2017091703
and 9 more


Showing elements 2201 - 2220 out of 2790