Known vulnerabilities in SUSE Linux Enterprise Server 15 - page 260

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 13023
Public exploits: 249
Known exploited (KEV): 60
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 is affected by 13023 known vulnerabilities: 36 critical, 938 high, 2286 medium, 9761 low Critical High Medium Low

Vulnerabilities (13023)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU115006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-58143		 CWE-362 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115005 - NULL Pointer Dereference
CVE-2025-58142		 CWE-476 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115004 - NULL Pointer Dereference
CVE-2025-27466		 CWE-476 Medium
No
No
 - 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115001 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58068		 CWE-444 Medium
No
No
 - 09.09.2025 SB2025090918
SB2025090920
SB2025090921
and 13 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-57833		 CWE-89 High
Available
No
 - 03.09.2025 SB2025090342
SB2025090433
SB2025090469
and 19 more
#VU114761 - Resource exhaustion
CVE-2025-58057		 CWE-400 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB2025101530
and 47 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-58056		 CWE-444 Medium
No
No
 - 03.09.2025 SB2025090340
SB2025090949
SB20251008161
and 39 more
#VU114677 - Out-of-bounds read
CVE-2025-8067		 CWE-125 Low
Available
No
 - 02.09.2025 SB2025090252
SB2025090254
SB2025090255
and 18 more
#VU114419 - Divide By Zero
CVE-2025-55212		 CWE-369 Medium
No
No
 - 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 12 more
#VU114418 - Use of Externally-Controlled Format String
CVE-2025-55298		 CWE-134 Medium
No
No
 - 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 15 more
#VU114417 - Integer overflow
CVE-2025-57803		 CWE-190 Medium
No
No
 - 26.08.2025 SB2025082604
SB2025090583
SB2025090584
and 17 more
#VU114299 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2025-55160		 CWE-758 Low
No
No
 - 20.08.2025 SB20250820103
SB2025090583
SB2025090584
and 20 more
#VU114296 - Heap-based Buffer Overflow
CVE-2025-55004		 CWE-122 High
No
No
 - 20.08.2025 SB20250820103
SB2025090584
SB2025090585
and 14 more
#VU114276 - Heap-based Buffer Overflow
CVE-2025-55005		 CWE-122 Medium
No
No
 - 20.08.2025 SB20250820103
SB2025090584
SB2025090585
and 15 more
#VU114264 - Integer overflow
CVE-2025-55154		 CWE-190 High
No
No
 - 20.08.2025 SB20250820103
SB2025090583
SB2025090584
and 20 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 - 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more
#VU112115 - Use After Free
CVE-2025-38087		 CWE-416 Low
No
No
 - 02.07.2025 SB2025070290
SB2025072808
SB2025080421
and 53 more
#VU107469 - Integer overflow
CVE-2025-2760		 CWE-190 High
No
No
 - 16.04.2025 SB2025041618
SB2025050984
SB2025050985
and 4 more
#VU37356 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-11509		 CWE-89 High
No
No
 - 28.03.2018 SB2018032829
SB20250908117


Showing elements 5181 - 5200 out of 13023