Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 - page 407

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15
Version: SP5
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 8231
Public exploits: 178
Known exploited (KEV): 52
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 version SP5 SUSE Linux Enterprise Server 15 SP5 is affected by 8231 vulnerabilities: 32 critical, 745 high, 1687 medium, 5766 low Critical High Medium Low

Vulnerabilities (8231)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77910 - Improper input validation
CVE-2016-7069		 CWE-20 Medium
No
No
 - 03.07.2023 SB2018091117
SB2023070341
SB2023070438
and 4 more
#VU77909 - Improper input validation
CVE-2018-14663		 CWE-20 Low
No
No
 - 03.07.2023 SB2018112748
SB2023070341
SB2023070438
and 4 more
#VU77775 - Permissions, Privileges, and Access Controls
CVE-2023-2431		 CWE-264 Low
No
No
 - 28.06.2023 SB2023062858
SB2023062901
SB20230820248
and 8 more
#VU77773 - NULL Pointer Dereference
CVE-2023-33461		 CWE-476 Medium
No
No
 - 28.06.2023 SB2023062852
SB2023062853
SB2023063047
and 6 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590		 CWE-1068 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588		 CWE-20 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77601 - Untrusted Search Path
CVE-2023-30585		 CWE-426 Low
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 13 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581		 CWE-264 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 - 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76721 - Missing release of memory after effective lifetime
CVE-2023-2700		 CWE-401 Low
No
No
 - 31.05.2023 SB2023053145
SB2023053152
SB2023060225
and 12 more
#VU76312 - Use After Free
CVE-2023-32373		 CWE-416 Critical
No
Exploited
 - 18.05.2023 SB2023051859
SB2023051860
SB2023051903
and 19 more
#VU76310 - Out-of-bounds read
CVE-2023-28204		 CWE-125 High
No
Exploited
 - 18.05.2023 SB2023051859
SB2023051860
SB2023051903
and 21 more
#VU75538 - Exposure of sensitive information to an unauthorized actor
CVE-2023-1786		 CWE-200 Medium
No
No
 - 27.04.2023 SB2023042703
SB2023042706
SB2023051101
and 16 more
#VU75388 - Out-of-bounds read
CVE-2023-1255		 CWE-125 Low
No
No
 - 20.04.2023 SB2023042039
SB2023053044
SB2023061445
and 25 more
#VU73274 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28120		 CWE-79 Medium
No
No
 - 14.03.2023 SB2023031410
SB2023041501
SB2023042648
and 13 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 - 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 - 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU64838 - Information Exposure Through Log Files
CVE-2022-2084		 CWE-532 Low
No
No
 - 30.06.2022 SB2022063026
SB2023062401
SB2023051967
and 3 more
#VU38443 - Cross-Site Request Forgery (CSRF)
CVE-2017-7557		 CWE-352 High
No
No
 - 22.08.2017 SB2017082211
SB2023070341
SB2023070438
and 4 more


Showing elements 8121 - 8140 out of 8231