Known vulnerabilities in SUSE Package Hub 15 15-SP6 - page 15

Vendor: SUSE
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 534
Public exploits: 25
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP6 SUSE Package Hub 15 15-SP6 is affected by 534 vulnerabilities: 4 critical, 157 high, 221 medium, 152 low Critical High Medium Low

Vulnerabilities (534)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104138 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-45339
CWE-59 Low
No
No
- 21.02.2025 SB2025022137
SB2025022138
SB2025022141
and 35 more
#VU104016 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22037
CWE-200 Low
No
No
- 17.02.2025 SB2025021737
SB2025021738
SB2025021739
and 5 more
#VU103970 - Improper input validation
CVE-2025-1094
CWE-20 Critical
Public exploit available
Exploited
- 14.02.2025 SB2025021408
SB2025022038
SB2025022039
and 77 more
#VU103812 - Improper input validation
CVE-2025-0938
CWE-20 Low
No
No
- 11.02.2025 SB20250211115
SB20250211130
SB20250211131
and 76 more
#VU103770 - Improper input validation
CVE-2025-24970
CWE-20 Medium
No
No
- 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193
CWE-400 Low
No
No
- 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU103659 - Security Features
CVE-2025-0650
CWE-254 Medium
No
No
- 05.02.2025 SB2025020552
SB2025020553
SB2025020554
and 20 more
#VU103421 - Argument Injection or Modification
CVE-2025-21613
CWE-88 Low
No
No
- 29.01.2025 SB2025012918
SB2025012919
SB2025012920
and 27 more
#VU101894 - Insufficient Technical Documentation
CVE-2024-51744
CWE-1059 Low
No
No
- 23.12.2024 SB2024122304
SB2024122309
SB20241230139
and 21 more
#VU101868 - Resource exhaustion
CVE-2024-45338
CWE-400 Medium
No
No
- 19.12.2024 SB2024121932
SB2024123101
SB2025010619
and 137 more
#VU101777 - Improper Authorization
CVE-2024-45337
CWE-285 Medium
Public exploit available
No
- 13.12.2024 SB2024121332
SB2024121333
SB2024121334
and 93 more
#VU99259 - Improper Access Control
CVE-2024-8118
CWE-284 Low
No
No
- 22.10.2024 SB20241022375
SB2025021467
SB2025021742
and 1 more
#VU96048 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6837
CWE-79 Medium
No
No
- 15.08.2024 SB2024081534
SB2025021467
SB2025021742
and 1 more
#VU87538 - Resource exhaustion
CVE-2024-28180
CWE-400 Medium
No
No
- 14.03.2024 SB2024031446
SB2024031447
SB2024031448
and 106 more
#VU85522 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-45232
CWE-835 Medium
No
No
- 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 28 more
#VU85521 - Out-of-bounds read
CVE-2023-45231
CWE-125 Low
No
No
- 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 27 more
#VU85520 - Memory corruption
CVE-2023-45230
CWE-119 Medium
No
No
- 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 35 more
#VU85519 - Out-of-bounds read
CVE-2023-45229
CWE-125 Low
No
No
- 17.01.2024 SB2024011752
SB2024012940
SB2024012950
and 27 more
#VU77652 - Improper Authentication
CVE-2023-3128
CWE-287 High
No
No
- 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more
#VU61605 - NULL Pointer Dereference
CVE-2021-41495
CWE-476 Low
No
No
- 24.03.2022 SB2022032417
SB2022072059
SB2022080314
and 10 more


Showing elements 281 - 300 out of 534