Known vulnerabilities in Web and Scripting Module 15-SP7 - page 3

Vendor: SUSE
Software: Web and Scripting Module
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 138
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Web and Scripting Module version 15-SP7 Web and Scripting Module 15-SP7 is affected by 138 vulnerabilities: 12 high, 84 medium, 42 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140833 - Uncontrolled Recursion
CVE-2026-7260		 CWE-674 Low
No
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 15 more
#VU140832 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-17543		 CWE-89 High
Public exploit available
No
 - 03.08.2026 SB2026080395
SB2026080397
SB2026080398
and 14 more
#VU140831 - Improper input validation
CVE-2026-9672		 CWE-20 Medium
No
No
 - 03.08.2026 SB2026080395
SB2026080396
SB2026080603
and 6 more
#VU140043 - Improper control of a resource through its lifetime
CVE-2026-58041		 CWE-664 Low
No
No
 - 29.07.2026 SB2026072975
SB20260831126
#VU140045 - Improper input validation
CVE-2026-58045		 CWE-20 Low
No
No
 - 29.07.2026 SB2026072975
SB20260831126
SB20260831127
and 4 more
#VU134271 - Improper input validation
CVE-2026-34182		 CWE-20 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 25 more
#VU134274 - NULL Pointer Dereference
CVE-2026-42764		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 52 more
#VU125561 - Always-Incorrect Control Flow Implementation
CVE-2026-2673		 CWE-670 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB20260409112
and 5 more
#VU122079 - Resource exhaustion
CVE-2025-66199		 CWE-400 Medium
No
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469		 CWE-197 Low
No
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 15 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468		 CWE-476 Medium
No
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 19 more
#VU122075 - Stack-based buffer overflow
CVE-2025-11187		 CWE-121 Medium
No
No
 - 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 20 more
#VU117442 - Improper input validation
CVE-2025-27587		 CWE-20 Medium
No
No
 - 22.10.2025 SB2025102223
SB2025102247
SB20260827159
#VU116215 - Out-of-bounds read
CVE-2025-9232		 CWE-125 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 13 more
#VU116214 - Covert Timing Channel
CVE-2025-9231		 CWE-385 Low
No
No
 - 01.10.2025 SB2025100119
SB2025100139
SB2025100153
and 10 more
#VU109657 - Expected Behavior Violation
CVE-2025-4575		 CWE-440 Low
No
No
 - 22.05.2025 SB2025052235
SB20251022138
SB20260120168
and 1 more
#VU103771 - Improper Authentication
CVE-2024-12797		 CWE-287 Medium
No
No
 - 11.02.2025 SB2025021187
SB20250211108
SB20250211159
and 60 more
#VU103600 - Covert Timing Channel
CVE-2024-13176		 CWE-385 Medium
No
No
 - 04.02.2025 SB2025020454
SB2025020456
SB2025020656
and 59 more
#VU98757 - Out-of-bounds write
CVE-2024-9143		 CWE-787 Low
No
No
 - 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 59 more


Showing elements 41 - 60 out of 138