Known vulnerabilities in SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 - page 65

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP2 LTSS
Version: 15-SP2
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1474
Public exploits: 79
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP2 LTSS version 15-SP2 SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 is affected by 1474 vulnerabilities: 18 critical, 245 high, 432 medium, 779 low Critical High Medium Low

Vulnerabilities (1474)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75996 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-30772		 CWE-362 Low
No
No
 - 10.05.2023 SB2023051050
SB2023051052
SB2023051053
and 42 more
#VU75994 - Use After Free
CVE-2023-2162		 CWE-416 Low
No
No
 - 10.05.2023 SB2023051048
SB2023051052
SB2023051053
and 101 more
#VU75667 - Use After Free
CVE-2022-48434		 CWE-416 High
No
No
 - 02.05.2023 SB2023050236
SB2023050251
SB2023050702
and 13 more
#VU75537 - Memory corruption
 CWE-119 High
No
No
 - 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75536 - Out-of-bounds read
 CWE-125 Low
No
No
 - 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75535 - Use After Free
 CWE-416 High
No
No
 - 27.04.2023 SB2023042702
SB2023042707
SB2023050905
#VU75529 - Use After Free
CVE-2023-1872		 CWE-416 Low
No
No
 - 26.04.2023 SB2023042644
SB2023042651
SB2023050128
and 15 more
#VU75486 - Improper input validation
CVE-2023-29007		 CWE-20 Low
Public exploit available
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815		 CWE-345 Low
No
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652		 CWE-59 Low
No
No
 - 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75482 - Integer overflow
CVE-2022-48468		 CWE-190 High
No
No
 - 25.04.2023 SB2022072825
SB2023042551
SB2023050992
and 50 more
#VU75454 - Security Features
CVE-2023-1998		 CWE-254 Low
Public exploit available
No
 - 24.04.2023 SB2023042434
SB2023042440
SB2023051052
and 55 more
#VU75453 - Use After Free
CVE-2023-1990		 CWE-416 Low
No
No
 - 24.04.2023 SB2023042432
SB2023042440
SB2023051052
and 50 more
#VU75452 - Use After Free
CVE-2023-1989		 CWE-416 Low
No
No
 - 24.04.2023 SB2023042431
SB2023042440
SB2023051052
and 80 more
#VU75102 - Improper Validation of Array Index
CVE-2023-2008		 CWE-129 Low
Public exploit available
No
 - 13.04.2023 SB2023041351
SB2023051053
SB2023051054
and 11 more
#VU70119 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-41915		 CWE-113 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023013027
and 25 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 - 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 56 more
#VU59207 - Improperly Implemented Security Check for Standard
CVE-2022-0108		 CWE-358 High
No
No
 - 04.01.2022 SB2022010424
SB2022010625
SB2022011730
and 23 more
#VU59053 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-42550		 CWE-94 Medium
No
No
 - 19.12.2021 SB2021121904
SB2022022307
SB2022032929
and 21 more


Showing elements 1281 - 1300 out of 1474