Known vulnerabilities in SUSE Package Hub 15 15-SP7 - page 14

Vendor: SUSE
Software: SUSE Package Hub 15
Version: 15-SP7
Software CPE: cpe:2.3:o:suse:suse_package_hub_15:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 674
Public exploits: 25
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub 15 version 15-SP7 SUSE Package Hub 15 15-SP7 is affected by 674 vulnerabilities: 1 critical, 244 high, 293 medium, 136 low Critical High Medium Low

Vulnerabilities (674)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125361 - Heap-based Buffer Overflow
CVE-2026-31806		 CWE-122 High
No
No
 - 08.04.2026 SB20260408100
SB20260408112
SB20260408113
and 28 more
#VU125360 - Out-of-bounds read
CVE-2026-31885		 CWE-125 Medium
No
No
 - 08.04.2026 SB20260408100
SB20260408112
SB20260408113
and 23 more
#VU125358 - Heap-based Buffer Overflow
CVE-2026-31883		 CWE-122 Medium
No
No
 - 08.04.2026 SB20260408100
SB20260408112
SB20260408113
and 23 more
#VU125347 - Buffer over-read
CVE-2026-26271		 CWE-126 Medium
No
No
 - 08.04.2026 SB2026040899
SB20260408109
SB20260408110
and 13 more
#VU125345 - Out-of-bounds write
CVE-2026-26955		 CWE-787 High
No
No
 - 08.04.2026 SB2026040899
SB20260408109
SB20260408110
and 24 more
#VU125344 - Out-of-bounds write
CVE-2026-26965		 CWE-787 High
No
No
 - 08.04.2026 SB2026040899
SB20260408109
SB20260408110
and 24 more
#VU125090 - Memory corruption
CVE-2026-5734		 CWE-119 High
No
No
 - 07.04.2026 SB20260407101
SB20260407102
SB20260407103
and 37 more
#VU125089 - Integer overflow
CVE-2026-5732		 CWE-190 High
No
No
 - 07.04.2026 SB20260407101
SB20260407102
SB20260407103
and 37 more
#VU125088 - Memory corruption
CVE-2026-5731		 CWE-119 High
No
No
 - 07.04.2026 SB20260407101
SB20260407102
SB20260407103
and 37 more
#VU124423 - Allocation of Resources Without Limits or Throttling
CVE-2026-33871		 CWE-770 Medium
No
No
 - 25.03.2026 SB2026032533
SB20260415180
SB20260422237
and 11 more
#VU124422 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-33870		 CWE-444 Medium
Public exploit available
No
 - 25.03.2026 SB2026032533
SB20260415180
SB2026042043
and 16 more
#VU124158 - Integer overflow
CVE-2026-4154		 CWE-190 High
No
No
 - 20.03.2026 SB2026032031
SB20260407100
SB20260417132
and 3 more
#VU124157 - Heap-based Buffer Overflow
CVE-2026-4153		 CWE-122 High
No
No
 - 20.03.2026 SB2026032031
SB20260407100
SB20260417132
and 5 more
#VU124154 - Integer overflow
CVE-2026-4150		 CWE-190 High
No
No
 - 20.03.2026 SB2026032031
SB20260407100
SB20260417132
and 5 more
#VU123893 - Stack-based buffer overflow
CVE-2026-28690		 CWE-121 High
No
No
 - 11.03.2026 SB2026031159
SB2026041402
SB20260415161
and 13 more
#VU123570 - Heap-based Buffer Overflow
CVE-2026-26284		 CWE-122 Medium
No
No
 - 05.03.2026 SB2026030565
SB2026030625
SB2026030639
and 13 more
#VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-61140		 CWE-1321 High
No
No
 - 27.02.2026 SB2026022706
SB2026022708
SB2026030405
and 3 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 - 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 65 more
#VU119131 - Interpretation Conflict
CVE-2025-12816		 CWE-436 Medium
No
No
 - 04.12.2025 SB2025120419
SB2025122219
SB20260116128
and 19 more
#VU117336 - Covert Timing Channel
CVE-2025-59438		 CWE-385 Medium
No
No
 - 17.10.2025 SB2025101717
SB2025101718
SB2025101719
and 9 more


Showing elements 261 - 280 out of 674