Known vulnerabilities in SUSE Linux Enterprise Server 15 SP5 LTSS - page 175

Vendor: SUSE
Software: SUSE Linux Enterprise Server 15 SP5
Version: LTSS
Software CPE: cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp5:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 3544
Public exploits: 84
Known exploited (KEV): 25
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Linux Enterprise Server 15 SP5 version LTSS SUSE Linux Enterprise Server 15 SP5 LTSS is affected by 3544 vulnerabilities: 18 critical, 380 high, 764 medium, 2382 low Critical High Medium Low

Vulnerabilities (3544)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102870 - Improper Encoding or Escaping of Output
CVE-2024-50349		 CWE-116 Low
No
No
 - 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102869 - Improper Encoding or Escaping of Output
CVE-2024-52006		 CWE-116 Low
No
No
 - 16.01.2025 SB2025011640
SB2025011641
SB2025011643
and 21 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 - 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102383 - Use After Free
CVE-2024-46981		 CWE-416 Medium
Public exploit available
No
 - 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 39 more
#VU102382 - Improper input validation
CVE-2024-51741		 CWE-20 Medium
No
No
 - 06.01.2025 SB2025010646
SB2025010647
SB2025010901
and 21 more
#VU101724 - Memory corruption
CVE-2024-54534		 CWE-119 High
No
No
 - 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 16 more
#VU101722 - Type confusion
CVE-2024-54505		 CWE-843 High
No
No
 - 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101721 - Improper input validation
CVE-2024-54508		 CWE-20 Low
No
No
 - 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101720 - Improper input validation
CVE-2024-54502		 CWE-20 Low
No
No
 - 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 29 more
#VU101719 - Improper input validation
CVE-2024-54479		 CWE-20 Low
No
No
 - 11.12.2024 SB2024121199
SB20241211100
SB2024121203
and 31 more
#VU100669 - Improper input validation
CVE-2024-44308		 CWE-20 Critical
No
Exploited
 - 19.11.2024 SB2024111982
SB2024111983
SB2024111984
and 15 more
#VU100668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-44309		 CWE-79 High
No
Exploited
 - 19.11.2024 SB2024111981
SB2024111982
SB2024111983
and 29 more
#VU98743 - Memory corruption
CVE-2024-44185		 CWE-119 Low
No
No
 - 16.10.2024 SB2024101669
SB2024073059
SB2024073048
and 29 more
#VU97350 - Protection Mechanism Failure
CVE-2024-44187		 CWE-693 Low
No
No
 - 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 32 more
#VU97349 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-40866		 CWE-451 Medium
No
No
 - 17.09.2024 SB2024091701
SB2024091702
SB2024091707
and 26 more
#VU96049 - UNIX Symbolic Link (Symlink) Following
CVE-2024-42472		 CWE-61 Low
No
No
 - 15.08.2024 SB2024081541
SB2024081542
SB2024081553
and 29 more
#VU88827 - Argument Injection or Modification
CVE-2024-32462		 CWE-88 Low
No
No
 - 19.04.2024 SB2024041902
SB2024041903
SB2024042944
and 29 more


Showing elements 3481 - 3500 out of 3544