Known vulnerabilities in SUSE Package Hub 15 15-SP4 - page 13

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 289
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP4 SUSE Package Hub 15 15-SP4 is affected by 289 vulnerabilities: 3 critical, 84 high, 121 medium, 81 low Critical High Medium Low

Vulnerabilities (289)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75444 - Improper input validation
CVE-2023-1981		 CWE-20 Low
No
No
 - 24.04.2023 SB2023042420
SB2023042421
SB2023042548
and 23 more
#VU75360 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-1410		 CWE-79 Low
No
No
 - 19.04.2023 SB2023041950
SB2023041951
SB2023041952
and 11 more
#VU75359 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0594		 CWE-79 Low
No
No
 - 19.04.2023 SB2023041949
SB2023041951
SB2023041952
and 6 more
#VU75358 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0507		 CWE-79 Low
No
No
 - 19.04.2023 SB2023041949
SB2023041951
SB2023041952
and 6 more
#VU74840 - Memory corruption
CVE-2023-29550		 CWE-119 High
No
No
 - 11.04.2023 SB2023041129
SB2023041137
SB2023041138
and 42 more
#VU74838 - Processor optimization removal or modification of security-critical code
CVE-2023-29548		 CWE-1037 Low
No
No
 - 11.04.2023 SB2023041129
SB2023041137
SB2023041138
and 42 more
#VU74185 - Memory corruption
CVE-2022-4900		 CWE-119 Low
No
No
 - 30.03.2023 SB2023033010
SB2023033014
SB2023041468
and 4 more
#VU74153 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-28427		 CWE-1321 Medium
No
No
 - 29.03.2023 SB2023032905
SB2023032908
SB2023033002
and 15 more
#VU74061 - Improper input validation
CVE-2023-24607		 CWE-20 Medium
No
No
 - 27.03.2023 SB2023032752
SB2023032757
SB2023072656
and 13 more
#VU73675 - Memory corruption
CVE-2023-28176		 CWE-119 High
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 37 more
#VU73674 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28163		 CWE-200 Low
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 11 more
#VU73673 - Out-of-bounds read
CVE-2023-25752		 CWE-125 Medium
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73672 - Type conversion
CVE-2023-28162		 CWE-704 High
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73671 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-28164		 CWE-451 Medium
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73670 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-25751		 CWE-94 High
No
No
 - 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 39 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Public exploit available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72339 - Resource exhaustion
CVE-2023-25577		 CWE-400 Medium
No
No
 - 16.02.2023 SB2023021673
SB2023022875
SB2023031332
and 49 more
#VU68717 - Out-of-bounds read
CVE-2022-32166		 CWE-125 Medium
No
No
 - 25.10.2022 SB2022102559
SB2022102561
SB2022102562
and 4 more
#VU55006 - Use After Free
CVE-2021-36980		 CWE-416 High
No
No
 - 20.07.2021 SB2021072016
SB2021072017
SB2021102110
and 15 more


Showing elements 241 - 260 out of 289