Known vulnerabilities in SUSE Package Hub 15 15-SP6 - page 8

Vendor: SUSE
Version: 15-SP6
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Total vulnerabilities: 534
Public exploits: 25
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP6 SUSE Package Hub 15 15-SP6 is affected by 534 vulnerabilities: 4 critical, 157 high, 221 medium, 152 low Critical High Medium Low

Vulnerabilities (534)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113838 - Memory corruption
CVE-2025-54351
CWE-119 High
No
No
- 12.08.2025 SB2025081257
SB2025081247
#VU113837 - Reachable Assertion
CVE-2025-54350
CWE-617 Medium
No
No
- 12.08.2025 SB2025081256
SB2025081257
SB2025081247
and 6 more
#VU113835 - Off-by-one Error
CVE-2025-54349
CWE-193 High
No
No
- 12.08.2025 SB2025081247
SB2025081256
SB2025081257
and 20 more
#VU113738 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-8194
CWE-835 Medium
No
No
- 07.08.2025 SB2025080731
SB2025080738
SB2025080739
and 93 more
#VU113526 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-40909
CWE-362 Low
No
No
- 31.07.2025 SB2025073123
SB2025073125
SB2025073126
and 43 more
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
- 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754
CWE-20 Medium
No
No
- 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112936 - Improper input validation
CVE-2025-50059
CWE-20 High
No
No
- 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 54 more
#VU112937 - Improper input validation
CVE-2025-30749
CWE-20 High
No
No
- 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106
CWE-20 High
No
No
- 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
- 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 33 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
- 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 27 more
#VU112731 - Improper Encoding or Escaping of Output
CVE-2024-47252
CWE-116 High
No
No
- 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 34 more
#VU112730 - Security Features
CVE-2025-23048
CWE-254 Medium
Public exploit available
No
- 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 29 more
#VU112729 - Resource Management Errors
CVE-2025-49630
CWE-399 Medium
No
No
- 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 26 more
#VU112728 - Cryptographic Issues
CVE-2025-49812
CWE-310 Medium
No
No
- 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 34 more
#VU112727 - Resource Management Errors
CVE-2025-53020
CWE-399 Medium
No
No
- 10.07.2025 SB2025071040
SB2025071201
SB2025071202
and 15 more
#VU112448 - Out-of-bounds write
CVE-2025-53367
CWE-787 High
No
No
- 07.07.2025 SB2025070783
SB2025070786
SB2025070787
and 10 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
- 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU6663 - Out-of-bounds read
CVE-2016-9840
CWE-125 Low
No
No
- 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more


Showing elements 141 - 160 out of 534