Known vulnerabilities in SUSE Package Hub 15 15-SP5 - page 3

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP5
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 545
Public exploits: 18
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP5 SUSE Package Hub 15 15-SP5 is affected by 545 vulnerabilities: 5 critical, 144 high, 223 medium, 173 low Critical High Medium Low

Vulnerabilities (545)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100447 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11159		 CWE-200 Low
No
No
 - 13.11.2024 SB2024111333
SB2024111603
SB2024112544
and 12 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99490 - Memory corruption
CVE-2024-10467		 CWE-119 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99286 - Out-of-bounds write
CVE-2024-41311		 CWE-787 High
No
No
 - 23.10.2024 SB2024102359
SB2024102361
SB2024102601
and 3 more
#VU99262 - Reachable Assertion
CVE-2024-8354		 CWE-617 Low
No
No
 - 22.10.2024 SB20241022385
SB20241022393
SB2024110815
and 10 more
#VU98831 - Missing release of memory after effective lifetime
CVE-2024-8612		 CWE-401 Low
No
No
 - 21.10.2024 SB2024102106
SB2024102117
SB20241022393
and 4 more
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU97748 - Improper input validation
CVE-2024-8925		 CWE-20 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 16 more
#VU97746 - Security Features
CVE-2024-8927		 CWE-254 Medium
No
No
 - 27.09.2024 SB2024092724
SB2024100148
SB2024100301
and 18 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU96080 - Improper Synchronization
CVE-2024-7409		 CWE-662 Medium
No
No
 - 16.08.2024 SB2024081656
SB2024081658
SB2024081659
and 32 more
#VU94504 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40725		 CWE-200 Medium
Public exploit available
No
 - 17.07.2024 SB20240717136
SB2024071854
SB2024071896
and 22 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU82245 - Resource Management Errors
CVE-2023-45802		 CWE-399 Medium
No
No
 - 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 36 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 - 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 53 more


Showing elements 41 - 60 out of 545