Known vulnerabilities in SUSE Package Hub 15 15-SP6 - page 18

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 534
Public exploits: 25
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP6 SUSE Package Hub 15 15-SP6 is affected by 534 vulnerabilities: 4 critical, 157 high, 221 medium, 152 low Critical High Medium Low

Vulnerabilities (534)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101681 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2024-52616		 CWE-337 Medium
No
No
 - 11.12.2024 SB2024121181
SB2024121182
SB2024121183
and 9 more
#VU100959 - Memory corruption
CVE-2024-11699		 CWE-119 High
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100958 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11698		 CWE-357 Medium
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 9 more
#VU100957 - Data Handling
CVE-2024-11697		 CWE-19 Low
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100956 - Error Handling
CVE-2024-11696		 CWE-388 Medium
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100955 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11695		 CWE-451 Medium
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100954 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11693		 CWE-357 Medium
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 12 more
#VU100953 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11692		 CWE-357 Low
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100952 - Security Features
CVE-2024-11694		 CWE-254 Medium
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 41 more
#VU100951 - Memory corruption
CVE-2024-11691		 CWE-119 High
No
No
 - 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 9 more
#VU100674 - Buffer over-read
CVE-2024-11233		 CWE-126 Medium
No
No
 - 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 16 more
#VU100673 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-11234		 CWE-93 Medium
No
No
 - 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100671 - Buffer over-read
CVE-2024-8929		 CWE-126 Medium
No
No
 - 19.11.2024 SB2024111985
SB2024112137
SB2024112138
and 15 more
#VU100516 - Improper input validation
CVE-2024-11168		 CWE-20 Medium
No
No
 - 15.11.2024 SB2024111507
SB2024111526
SB2024111527
and 76 more
#VU99623 - Resource exhaustion
CVE-2024-49769		 CWE-400 Medium
No
No
 - 01.11.2024 SB2024110154
SB20241101104
SB2024110713
and 24 more
#VU99262 - Reachable Assertion
CVE-2024-8354		 CWE-617 Low
No
No
 - 22.10.2024 SB20241022385
SB20241022393
SB2024110815
and 10 more
#VU98831 - Missing release of memory after effective lifetime
CVE-2024-8612		 CWE-401 Low
No
No
 - 21.10.2024 SB2024102106
SB2024102117
SB20241022393
and 4 more
#VU94528 - Operation on a Resource after Expiration or Release
CVE-2024-4693		 CWE-672 Medium
No
No
 - 18.07.2024 SB2024071839
SB20241022393
SB2024111101
and 2 more
#VU88098 - Use of Uninitialized Variable
CVE-2024-26147		 CWE-457 Low
No
No
 - 03.04.2024 SB2024040355
SB2024040357
SB2024040358
and 13 more
#VU86548 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-25620		 CWE-22 Medium
No
No
 - 15.02.2024 SB2024021537
SB2024040354
SB2024040360
and 9 more


Showing elements 341 - 360 out of 534