Known vulnerabilities in SUSE Linux Enterprise Server 15 SP6 - page 133

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15
Version: SP6
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 7080
Public exploits: 136
Known exploited (KEV): 35
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 version SP6 SUSE Linux Enterprise Server 15 SP6 is affected by 7080 vulnerabilities: 22 critical, 590 high, 1352 medium, 5114 low Critical High Medium Low

Vulnerabilities (7080)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116686 - Protection Mechanism Failure
CVE-2025-47910		 CWE-693 Medium
No
No
 - 07.10.2025 SB2025100755
SB2025100756
SB2025100757
and 88 more
#VU116641 - Improper Authentication
CVE-2025-46818		 CWE-287 Medium
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 39 more
#VU116640 - Out-of-bounds read
CVE-2025-46819		 CWE-125 Medium
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 39 more
#VU116639 - Integer overflow
CVE-2025-46817		 CWE-190 High
Public exploit available
No
 - 07.10.2025 SB2025100706
SB2025100709
SB2025100710
and 46 more
#VU116609 - Use After Free
CVE-2025-49844		 CWE-416 Medium
Public exploit available
No
 - 06.10.2025 SB2025100629
SB2025100633
SB2025100709
and 56 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-59682		 CWE-22 Medium
No
No
 - 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 14 more
#VU116426 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-59681		 CWE-89 High
No
No
 - 03.10.2025 SB2025100337
SB2025100340
SB2025100647
and 12 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU116185 - Improper Access Control
CVE-2025-41244		 CWE-284 High
No
Exploited
 - 30.09.2025 SB2025093024
SB2025093025
SB2025093036
and 21 more
#VU116116 - Improper Resource Shutdown or Release
CVE-2024-55553		 CWE-404 Medium
No
No
 - 25.09.2025 SB2025092543
SB2025092554
SB2025092556
and 1 more
#VU116114 - Reachable Assertion
CVE-2025-50422		 CWE-617 Low
No
No
 - 25.09.2025 SB2025092541
SB2025092549
SB2025092555
and 5 more
#VU114558 - Missing release of memory after effective lifetime
CVE-2025-58058		 CWE-401 Medium
No
No
 - 29.08.2025 SB2025082919
SB2025083001
SB2025090123
and 39 more
#VU114082 - Out-of-bounds read
CVE-2025-53859		 CWE-125 Low
No
No
 - 14.08.2025 SB2025081427
SB2025082564
SB2025082961
and 12 more
#VU113376 - Use After Free
CVE-2025-38477		 CWE-416 Low
No
No
 - 29.07.2025 SB2025072925
SB2025081507
SB2025081508
and 120 more
#VU112118 - NULL Pointer Dereference
CVE-2025-38089		 CWE-476 Low
Public exploit available
No
 - 02.07.2025 SB2025070293
SB2025072102
SB2025072121
and 54 more
#VU109790 - Cleartext Storage of Sensitive Information
CVE-2025-48708		 CWE-312 Medium
Public exploit available
No
 - 24.05.2025 SB2025052401
SB2025052402
SB2025052754
and 7 more
#VU103686 - Improper Authentication
CVE-2025-23419		 CWE-287 Low
No
No
 - 06.02.2025 SB2025020653
SB2025020670
SB2025020671
and 17 more
#VU97643 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-45614		 CWE-444 Medium
No
No
 - 23.09.2024 SB2024092330
SB2024092459
SB2024092476
and 9 more
#VU85835 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-21647		 CWE-444 Medium
No
No
 - 26.01.2024 SB2024012625
SB2024012628
SB2024030762
and 10 more
#VU82971 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40175		 CWE-444 Medium
No
No
 - 10.11.2023 SB2023111025
SB2023111028
SB2024021549
and 8 more


Showing elements 2641 - 2660 out of 7080