Known vulnerabilities in Web and Scripting Module 15-SP4 - page 2

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 34
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP4 Web and Scripting Module 15-SP4 is affected by 34 vulnerabilities: 1 critical, 3 high, 25 medium, 5 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 - 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 - 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Public exploit available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 - 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU72399 - Resource Management Errors
CVE-2023-23919		 CWE-399 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 33 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 - 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU72167 - Out-of-bounds write
CVE-2023-0568		 CWE-787 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU72165 - Improper input validation
CVE-2023-0662		 CWE-20 Medium
No
No
 - 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 25 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more


Showing elements 21 - 40 out of 34