Known vulnerabilities in SUSE Linux Enterprise Server 15 SP6 - page 29

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15
Version: SP6
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 7080
Public exploits: 136
Known exploited (KEV): 35
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 version SP6 SUSE Linux Enterprise Server 15 SP6 is affected by 7080 vulnerabilities: 22 critical, 590 high, 1352 medium, 5114 low Critical High Medium Low

Vulnerabilities (7080)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545		 CWE-200 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 10 more
#VU135086 - Use After Free
CVE-2026-9080		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 10 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079		 CWE-522 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 10 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 12 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 13 more
#VU135080 - Improper Validation of Certificate with Host Mismatch
CVE-2026-12064		 CWE-297 Medium
No
No
 - 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 10 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 11 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458		 CWE-488 Low
No
No
 - 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 11 more
#VU135070 - Use After Free
CVE-2026-10536		 CWE-416 Low
No
No
 - 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 11 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 24 more
#VU133242 - Deserialization of Untrusted Data
CVE-2026-34993		 CWE-502 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 4 more
#VU133241 - Improper Access Control
CVE-2026-47265		 CWE-284 Medium
No
No
 - 02.06.2026 SB2026060241
SB2026060556
SB2026060557
and 2 more
#VU127950 - Resource exhaustion
CVE-2026-34517		 CWE-400 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127949 - Exposure of sensitive information to an unauthorized actor
CVE-2026-34518		 CWE-200 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127948 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34519		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127947 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2026-34520		 CWE-113 Medium
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127946 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-34525		 CWE-444 Low
No
No
 - 26.04.2026 SB2026042605
SB2026050302
SB2026050303
and 6 more
#VU127639 - Out-of-bounds write
CVE-2026-31505		 CWE-787 Low
No
No
 - 24.04.2026 SB20260424208
SB20260513116
SB2026060227
and 39 more
#VU124442 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23393		 CWE-362 Low
No
No
 - 25.03.2026 SB2026032548
SB2026041129
SB2026041130
and 35 more


Showing elements 561 - 580 out of 7080