Known vulnerabilities in Web and Scripting Module - page 3

Vendor: SUSE
Software: Web and Scripting Module
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 190
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Web and Scripting Module Web and Scripting Module is affected by 190 known vulnerabilities: 2 critical, 17 high, 126 medium, 45 low Critical High Medium Low

Vulnerabilities (190)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126390 - Missing release of memory after effective lifetime
CVE-2025-59464		 CWE-401 Medium
No
No
 - 17.04.2026 SB2026041708
SB2026041714
SB2026041715
and 3 more
#VU125893 - Improper Neutralization of Escape, Meta, or Control Sequences
CVE-2025-67746		 CWE-150 Medium
No
No
 - 14.04.2026 SB2026041444
SB2026041449
SB2026041450
and 2 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 13 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU125746 - Protection Mechanism Failure
CVE-2026-34486		 CWE-693 Medium
No
Exploited
 - 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 14 more
#VU125743 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-24880		 CWE-444 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 18 more
#VU125740 - Improper Certificate Validation
CVE-2026-29145		 CWE-295 Low
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 17 more
#VU125741 - Configuration
CVE-2026-29129		 CWE-16 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 12 more
#VU125742 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-25854		 CWE-601 Low
No
No
 - 09.04.2026 SB20260409109
SB2026041565
SB20260417131
and 14 more
#VU125738 - Improper input validation
CVE-2026-32990		 CWE-20 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB2026042329
and 9 more
#VU125739 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-29146		 CWE-327 Medium
No
No
 - 09.04.2026 SB20260409109
SB20260417131
SB20260422214
and 28 more
#VU124546 - Missing release of memory after effective lifetime
CVE-2026-21714		 CWE-401 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 20 more
#VU124547 - Creation of chroot Jail Without Changing Working Directory
CVE-2026-21717		 CWE-243 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 17 more
#VU124548 - Improper Access Control
CVE-2026-21715		 CWE-284 Low
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041564
and 18 more
#VU124549 - Improper Access Control
CVE-2026-21716		 CWE-284 Low
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB20260415182
and 18 more
#VU124541 - DEPRECATED: Often Misused: Path Manipulation
CVE-2026-21637		 CWE-249 High
No
No
 - 25.03.2026 SB2026032902
SB20260415182
SB20260415187
and 26 more
#VU124542 - Error Handling
CVE-2026-21710		 CWE-388 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041056
and 29 more
#VU124544 - Reachable Assertion
CVE-2026-21712		 CWE-617 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026041725
SB20260424153
and 2 more
#VU124545 - Information Exposure Through Timing Discrepancy
CVE-2026-21713		 CWE-208 Medium
No
No
 - 25.03.2026 SB20260325154
SB2026032902
SB2026041543
and 19 more


Showing elements 41 - 60 out of 190