Known vulnerabilities in Web and Scripting Module - page 9

Vendor: SUSE
Software: Web and Scripting Module
Software CPE: cpe:2.3:o:suse:web_and_scripting_module:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 190
Public exploits: 17
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Web and Scripting Module Web and Scripting Module is affected by 190 known vulnerabilities: 2 critical, 17 high, 126 medium, 45 low Critical High Medium Low

Vulnerabilities (190)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002		 CWE-264 Medium
No
No
 - 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590		 CWE-1068 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589		 CWE-444 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588		 CWE-20 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77601 - Untrusted Search Path
CVE-2023-30585		 CWE-426 Low
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 13 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581		 CWE-264 Medium
No
No
 - 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU77112 - Use of Insufficiently Random Values
CVE-2023-3247		 CWE-330 Medium
No
No
 - 09.06.2023 SB2023060919
SB2023061105
SB2023061516
and 24 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130		 CWE-124 Low
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124		 CWE-338 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76423 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067		 CWE-20 Medium
No
No
 - 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU76417 - Allocation of Resources Without Limits or Throttling
CVE-2023-28709		 CWE-770 Medium
No
No
 - 22.05.2023 SB2023052235
SB2023053003
SB2023053052
and 35 more
#VU74185 - Memory corruption
CVE-2022-4900		 CWE-119 Low
No
No
 - 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 - 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more


Showing elements 161 - 180 out of 190