Known vulnerabilities in SUSE Manager Proxy - page 315

Vendor: SUSE
Software: SUSE Manager Proxy
Software CPE: cpe:2.3:o:suse:suse_manager_proxy:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 7084
Public exploits: 213
Known exploited (KEV): 74

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Manager Proxy SUSE Manager Proxy is affected by 7084 known vulnerabilities: 41 critical, 756 high, 1654 medium, 4633 low Critical High Medium Low

Vulnerabilities (7084)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68723 - UNIX Symbolic Link (Symlink) Following
CVE-2022-41973		 CWE-61 Low
No
No
 - 26.10.2022 SB2022102601
SB2022102602
SB2022102603
and 28 more
#VU68722 - Improper Authorization
CVE-2022-41974		 CWE-285 Low
No
No
 - 26.10.2022 SB2022102601
SB2022102602
SB2022102603
and 43 more
#VU68560 - UNIX Symbolic Link (Symlink) Following
CVE-2021-32000		 CWE-61 Low
No
No
 - 20.10.2022 SB2022102092
SB2022102093
#VU68559 - Out-of-bounds write
CVE-2021-3409		 CWE-787 Medium
No
No
 - 20.10.2022 SB2021032316
SB2022102091
SB2022102676
and 1 more
#VU68550 - Missing release of memory after effective lifetime
CVE-2022-2963		 CWE-401 Low
No
No
 - 20.10.2022 SB2022102073
SB2022102075
SB2022102076
and 3 more
#VU68376 - Integer overflow
CVE-2022-3515		 CWE-190 High
No
No
 - 18.10.2022 SB2022101805
SB2022101807
SB2022101808
and 64 more
#VU68115 - Command injection
CVE-2022-3140		 CWE-77 High
No
No
 - 11.10.2022 SB2022101127
SB2022101306
SB2022101830
and 7 more
#VU67945 - Resource exhaustion
CVE-2022-36055		 CWE-400 Medium
No
No
 - 05.10.2022 SB2022100548
SB2022100551
SB2022102004
and 4 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178		 CWE-401 Medium
No
No
 - 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU67512 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2016-3695		 CWE-74 Low
No
No
 - 20.09.2022 SB2017122926
SB2022092046
SB2022092047
and 6 more
#VU67511 - Use After Free
CVE-2020-27784		 CWE-416 Low
No
No
 - 20.09.2022 SB2022092043
SB2022092046
SB2022092823
and 5 more
#VU65768 - Inadequate Encryption Strength
CVE-2022-26307		 CWE-326 Low
No
No
 - 25.07.2022 SB2022072548
SB2022100634
SB2022101830
and 5 more
#VU65760 - Improper Certificate Validation
CVE-2022-26305		 CWE-295 Medium
No
No
 - 25.07.2022 SB2022072520
SB2022100634
SB2022101830
and 5 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU63788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-4207		 CWE-362 Low
No
No
 - 30.05.2022 SB2022061333
SB2022062124
SB2022070437
and 9 more
#VU63787 - Integer overflow
CVE-2021-4206		 CWE-190 Low
No
No
 - 30.05.2022 SB2022061333
SB2022062124
SB2022070437
and 9 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU15559 - Improper Access Control
CVE-2018-1000805		 CWE-284 High
No
No
 - 24.10.2018 SB2018090720
SB2018102423
SB2018100403
and 15 more


Showing elements 6281 - 6300 out of 7084