Known vulnerabilities in SUSE Package Hub 15 15-SP5

Vendor: SUSE
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 545
Public exploits: 18
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP5 SUSE Package Hub 15 15-SP5 is affected by 545 vulnerabilities: 5 critical, 144 high, 223 medium, 173 low Critical High Medium Low

Vulnerabilities (545)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114096 - Improper input validation
CVE-2025-8715
CWE-20 Medium
No
No
- 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 51 more
#VU114095 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-8714
CWE-94 Low
Public exploit available
No
- 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 53 more
#VU114094 - Permissions, Privileges, and Access Controls
CVE-2025-8713
CWE-264 Low
No
No
- 14.08.2025 SB2025081496
SB2025081898
SB2025082551
and 31 more
#VU108834 - Buffer over-read
CVE-2025-4207
CWE-126 Medium
No
No
- 09.05.2025 SB2025050920
SB2025051669
SB20250521157
and 37 more
#VU101964 - Resource Management Errors
CVE-2024-26328
CWE-399 Medium
No
No
- 27.12.2024 SB2024122757
SB2024122903
SB2025021859
and 2 more
#VU101796 - Improper input validation
CVE-2024-50336
CWE-20 Medium
No
No
- 16.12.2024 SB2024121637
SB2024121638
SB2024121639
and 6 more
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616
CWE-337 Medium
No
No
- 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU100674 - Buffer over-read
CVE-2024-11233
CWE-126 Medium
No
No
- 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234
CWE-93 Medium
No
No
- 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100514 - Improper Authorization
CVE-2024-10979
CWE-285 High
No
No
- 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978
CWE-266 Medium
No
No
- 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977
CWE-300 Low
No
No
- 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976
CWE-269 Medium
No
No
- 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU100259 - Resource Management Errors
CVE-2024-47535
CWE-399 Low
No
No
- 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU100251 - Memory corruption
CVE-2024-26327
CWE-119 Low
No
No
- 12.11.2024 SB2024111273
SB2024111275
SB2024122903
and 3 more
#VU88538 - Integer underflow
CVE-2024-24474
CWE-191 Low
No
No
- 15.04.2024 SB2024041550
SB2024041552
SB2024041553
and 4 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147
CWE-457 Low
No
No
- 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU87161 - Stack-based buffer overflow
CVE-2023-6693
CWE-121 Low
No
No
- 06.03.2024 SB2024030635
SB2024030637
SB2024032249
and 9 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620
CWE-22 Medium
No
No
- 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more
#VU85831 - Out-of-bounds read
CVE-2023-1544
CWE-125 Low
No
No
- 26.01.2024 SB2024012622
SB2024012627
SB2023120193
and 10 more


Showing elements 1 - 20 out of 545