Known vulnerabilities in SUSE Package Hub for SUSE Linux Enterprise

Vendor: SUSE
Software: SUSE Package Hub for SUSE Linux Enterprise
Software CPE: cpe:2.3:a:suse:suse_package_hub_for_suse_linux_enterprise:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 204
Public exploits: 20
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Package Hub for SUSE Linux Enterprise SUSE Package Hub for SUSE Linux Enterprise is affected by 204 known vulnerabilities: 2 critical, 83 high, 57 medium, 62 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47532 - Improper input validation
CVE-2020-25829		 CWE-20 Medium
No
No
 - 13.10.2020 SB2020101312
SB2020101606
SB2020101711
and 5 more
#VU47490 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-26935		 CWE-89 Medium
No
No
 - 10.10.2020 SB2020101001
SB2020101610
SB2020101611
and 8 more
#VU47489 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26934		 CWE-79 Low
No
No
 - 10.10.2020 SB2020101001
SB2020101610
SB2020101611
and 8 more
#VU45986 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-24368		 CWE-22 Medium
No
No
 - 24.08.2020 SB2020082411
SB2020082412
SB2020101608
and 2 more
#VU29577 - Improper Access Control
CVE-2020-14196		 CWE-284 Medium
No
No
 - 08.07.2020 SB2020070802
SB2020070803
SB2020071905
and 8 more
#VU26290 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-10803		 CWE-79 Low
No
No
 - 21.03.2020 SB2020032102
SB2020033001
SB2020033003
and 8 more
#VU26289 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-10802		 CWE-89 Low
No
No
 - 21.03.2020 SB2020032102
SB2020033001
SB2020033003
and 8 more
#VU26288 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-10804		 CWE-89 Low
No
No
 - 21.03.2020 SB2020032102
SB2020033001
SB2020033003
and 8 more
#VU10733 - Buffer overflow
CVE-2016-1669		 CWE-120 Low
No
No
 - 27.02.2018 SB2016042302
SB2017040503
SB2018022115
and 7 more
#VU40058 - Memory corruption
CVE-2016-9115		 CWE-119 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40059 - NULL Pointer Dereference
CVE-2016-9114		 CWE-476 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40060 - NULL Pointer Dereference
CVE-2016-9113		 CWE-476 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40061 - Divide By Zero
CVE-2016-9112		 CWE-369 Medium
No
No
 - 29.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40068 - Memory corruption
CVE-2016-8332		 CWE-119 High
No
No
 - 28.10.2016 SB2016102811
SB2017092622
SB2017011935
and 2 more
#VU32239 - NULL Pointer Dereference
CVE-2016-7445		 CWE-476 Medium
No
No
 - 03.10.2016 SB2016100311
SB2016101942
SB2017092622
and 10 more
#VU33492 - Out-of-bounds read
CVE-2016-7163		 CWE-125 Low
No
No
 - 21.09.2016 SB2016092144
SB2016091514
SB2017092622
and 13 more
#VU40093 - Use After Free
CVE-2015-8871		 CWE-416 High
No
No
 - 21.09.2016 SB2016092147
SB2017092622
SB2017081733
and 5 more
#VU40286 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-1670		 CWE-362 Medium
No
No
 - 15.05.2016 SB2016051706
SB2016051616
SB2016051323
#VU40287 - Improper Access Control
CVE-2016-1668		 CWE-284 High
No
No
 - 15.05.2016 SB2016051706
SB2016051616
SB2016051323
#VU40288 - Improper Access Control
CVE-2016-1667		 CWE-284 High
No
No
 - 15.05.2016 SB2016051706
SB2016051616
SB2016051323


Showing elements 1 - 20 out of 204