Known vulnerabilities in SUSE Package Hub 15 15-SP6 - page 19

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 534
Public exploits: 25
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP6 SUSE Package Hub 15 15-SP6 is affected by 534 vulnerabilities: 4 critical, 157 high, 221 medium, 152 low Critical High Medium Low

Vulnerabilities (534)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100514 - Improper Authorization
CVE-2024-10979		 CWE-285 High
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 65 more
#VU100513 - Incorrect Privilege Assignment
CVE-2024-10978		 CWE-266 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 46 more
#VU100512 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-10977		 CWE-300 Low
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 34 more
#VU100511 - Improper Privilege Management
CVE-2024-10976		 CWE-269 Medium
No
No
 - 15.11.2024 SB2024111502
SB2024111601
SB2024112245
and 47 more
#VU100447 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11159		 CWE-200 Low
No
No
 - 13.11.2024 SB2024111333
SB2024111603
SB2024112544
and 12 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU99490 - Memory corruption
CVE-2024-10467		 CWE-119 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99489 - Resource Management Errors
CVE-2024-10466		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99488 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10465		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99487 - Resource Management Errors
CVE-2024-10464		 CWE-399 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462		 CWE-451 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461		 CWE-79 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460		 CWE-357 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463		 CWE-200 Low
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459		 CWE-416 High
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458		 CWE-264 Medium
No
No
 - 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99286 - Out-of-bounds write
CVE-2024-41311		 CWE-787 High
No
No
 - 23.10.2024 SB2024102359
SB2024102361
SB2024102601
and 3 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28168		 CWE-611 Medium
No
No
 - 14.10.2024 SB2024101462
SB2024101465
SB2024112829
and 18 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 - 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 53 more


Showing elements 361 - 380 out of 534