Known vulnerabilities in SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security - page 2

Vendor: SUSE
Software: SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_12_sp5_ltss_extended_security:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 57
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security is affected by 57 known vulnerabilities: 1 critical, 18 high, 19 medium, 19 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU99865 - Comparison using wrong factors
CVE-2024-9681		 CWE-1025 Low
No
No
 - 06.11.2024 SB2024110621
SB2024110655
SB2024110656
and 30 more
#VU99493 - Heap-based Buffer Overflow
CVE-2024-9632		 CWE-122 Low
No
No
 - 29.10.2024 SB2024102981
SB2024102982
SB2024102984
and 35 more
#VU99490 - Memory corruption
CVE-2024-10467		 CWE-119 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99487 - Resource Management Errors
CVE-2024-10464		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462		 CWE-451 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461		 CWE-79 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463		 CWE-200 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459		 CWE-416 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458		 CWE-264 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-9287		 CWE-78 Low
No
No
 - 28.10.2024 SB2024102836
SB2024102838
SB20241101111
and 117 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU98052 - Integer overflow
CVE-2024-36474		 CWE-190 High
No
No
 - 07.10.2024 SB2024100710
SB2024100712
SB2024101046
and 10 more
#VU98051 - Integer overflow
CVE-2024-42415		 CWE-190 High
No
No
 - 07.10.2024 SB2024100710
SB2024100712
SB2024101046
and 10 more
#VU32194 - NULL Pointer Dereference
CVE-2016-9888		 CWE-476 Medium
No
No
 - 08.12.2016 SB2016120803
SB2016122013
SB2024102971
and 4 more


Showing elements 21 - 40 out of 57