Known vulnerabilities in SUSE Package Hub 15 15-SP4 - page 14

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP4
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 289
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP4 SUSE Package Hub 15 15-SP4 is affected by 289 vulnerabilities: 3 critical, 84 high, 121 medium, 81 low Critical High Medium Low

Vulnerabilities (289)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73214 - Out-of-bounds write
CVE-2021-37501		 CWE-787 Medium
No
No
 - 09.03.2023 SB2023030944
SB2023030948
SB2023031657
and 6 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 - 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 - 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU72329 - Resource Management Errors
CVE-2023-0616		 CWE-399 Low
No
No
 - 16.02.2023 SB2023021644
SB2023021701
SB2023021901
and 15 more
#VU72257 - Security Features
CVE-2023-25734		 CWE-254 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021553
SB2023021644
and 10 more
#VU72256 - Out-of-bounds write
CVE-2023-25732		 CWE-787 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 38 more
#VU72255 - Insufficient UI Warning of Dangerous Operations
CVE-2023-25729		 CWE-357 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72252 - Type conversion
CVE-2023-25737		 CWE-704 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 38 more
#VU72251 - Use After Free
CVE-2023-25735		 CWE-416 High
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72250 - Out-of-bounds write
CVE-2023-0767		 CWE-787 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 84 more
#VU72249 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-25730		 CWE-451 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72248 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25728		 CWE-200 Medium
No
No
 - 15.02.2023 SB2023021549
SB2023021551
SB2023021552
and 39 more
#VU72088 - Out-of-bounds read
CVE-2022-41862		 CWE-125 Medium
No
No
 - 09.02.2023 SB2023020953
SB2023021334
SB2023021335
and 47 more
#VU72073 - Exposure of sensitive information to an unauthorized actor
CVE-2023-25165		 CWE-200 Medium
No
No
 - 08.02.2023 SB2023020875
SB2023032437
SB2023040464
and 7 more
#VU71567 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23552		 CWE-79 Low
No
No
 - 26.01.2023 SB2023012632
SB2023032032
SB2023032033
and 10 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2022-39324		 CWE-451 Low
No
No
 - 26.01.2023 SB2023012631
SB2023032032
SB2023032033
and 12 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 - 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU69691 - Use of Password Hash Instead of Password for Authentication
CVE-2022-46146		 CWE-836 Low
No
No
 - 29.11.2022 SB2022112926
SB2022113012
SB2023022044
and 33 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more


Showing elements 261 - 280 out of 289