Known vulnerabilities in SUSE Linux Enterprise Server - page 137

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 2790
Public exploits: 134
Known exploited (KEV): 42

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server SUSE Linux Enterprise Server is affected by 2790 known vulnerabilities: 21 critical, 563 high, 1063 medium, 1143 low Critical High Medium Low

Vulnerabilities (2790)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59116 - Out-of-bounds write
CVE-2020-17438
CWE-787 Critical
No
No
- 29.12.2021 SB2020121201
SB2021122914
SB2021030119
and 1 more
#VU59106 - Improper input validation
CVE-2021-30004
CWE-20 Medium
No
No
- 29.12.2021 SB2021040206
SB2021040207
SB2021122905
and 6 more
#VU52793 - Out-of-bounds read
CVE-2021-1404
CWE-125 Medium
No
No
- 03.05.2021 SB2021040720
SB2021041384
SB2021041427
and 5 more
#VU52792 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-1252
CWE-835 Medium
No
No
- 03.05.2021 SB2021040720
SB2021041384
SB2021041427
and 5 more
#VU52784 - NULL Pointer Dereference
CVE-2021-1405
CWE-476 Medium
No
No
- 01.05.2021 SB2021050109
SB2021040720
SB2021041384
and 6 more
#VU52197 - Integer underflow
CVE-2021-3472
CWE-191 Low
No
No
- 13.04.2021 SB2021041370
SB2021042121
SB2021050107
and 17 more
#VU51703 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1946
CWE-78 Medium
No
No
- 24.03.2021 SB2021032412
SB2021032901
SB2021040168
and 10 more
#VU50988 - Permissions, Privileges, and Access Controls
CVE-2020-28243
CWE-264 Medium
Available
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50987 - Improper Certificate Validation
CVE-2020-28972
CWE-295 Medium
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50986 - Improper Authentication
CVE-2021-3144
CWE-287 High
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 28 more
#VU50985 - Improper Certificate Validation
CVE-2020-35662
CWE-295 Medium
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50984 - Command injection
CVE-2021-3148
CWE-77 Medium
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50983 - Information Exposure Through Log Files
CVE-2021-25284
CWE-532 Low
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50982 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-25283
CWE-94 High
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50981 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-3197
CWE-78 High
No
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50980 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-25282
CWE-22 Medium
Available
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50979 - Improper Access Control
CVE-2021-25281
CWE-284 Medium
Available
No
- 28.02.2021 SB2021022809
SB2021022810
SB2021032201
and 29 more
#VU50430 - Incorrect Regular Expression
CVE-2020-28493
CWE-185 Medium
No
No
- 01.02.2021 SB2021020905
SB2021020908
SB2021020909
and 21 more
#VU23600 - Improper input validation
CVE-2019-12420
CWE-20 Medium
No
No
- 13.12.2019 SB2019121311
SB2019121501
SB2020011316
and 7 more
#VU23404 - Improper Authentication
CVE-2019-17437
CWE-287 Low
No
No
- 05.12.2019 SB2019120501
SB2021030119


Showing elements 2721 - 2740 out of 2790