Known vulnerabilities in SUSE Package Hub for SUSE Linux Enterprise 12 - page 2

Vendor: SUSE
Software: SUSE Package Hub for SUSE Linux Enterprise
Version: 12
Software CPE: cpe:2.3:a:suse:suse_package_hub_for_suse_linux_enterprise:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 204
Public exploits: 20
Known exploited (KEV): 5

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE Package Hub for SUSE Linux Enterprise version 12 SUSE Package Hub for SUSE Linux Enterprise 12 is affected by 204 vulnerabilities: 2 critical, 83 high, 57 medium, 62 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27394 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2009-4112		 CWE-78 Low
Public exploit available
No
 - 28.04.2020 SB2009113001
SB2020043036
SB2020042875
and 3 more
#VU21303 - Improper Access Control
CVE-2019-16723		 CWE-284 Medium
No
No
 - 24.09.2019 SB2019092410
SB2020012104
SB2020031923
and 9 more
#VU36232 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20723		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36233 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20724		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36234 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20725		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU36235 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20726		 CWE-79 Low
No
No
 - 16.01.2019 SB2019011620
SB2020043036
SB2020042875
and 5 more
#VU14216 - Heap-based Buffer Overflow
CVE-2016-9573		 CWE-125 Low
No
No
 - 07.08.2018 SB2016110205
SB2017092622
SB2017011935
and 13 more
#VU36803 - NULL Pointer Dereference
CVE-2016-9572		 CWE-476 Medium
No
No
 - 01.08.2018 SB2018080136
SB2017092622
SB2017011935
and 14 more
#VU33222 - Integer overflow
CVE-2016-9580		 CWE-190 High
No
No
 - 01.08.2018 SB2018080129
SB2016122109
SB2017092622
and 10 more
#VU33247 - Memory corruption
CVE-2016-9581		 CWE-119 High
No
No
 - 01.08.2018 SB2018080130
SB2016122110
SB2017092622
and 10 more
#VU37499 - Out-of-bounds read
CVE-2018-7435		 CWE-125 High
No
No
 - 23.02.2018 SB2018022322
SB2018030129
SB2018030130
and 1 more
#VU37500 - Out-of-bounds read
CVE-2018-7436		 CWE-125 High
No
No
 - 23.02.2018 SB2018022323
SB2018030129
SB2018030130
and 1 more
#VU37501 - Out-of-bounds read
CVE-2018-7437		 CWE-125 High
No
No
 - 23.02.2018 SB2018022324
SB2018030129
SB2018030130
and 1 more
#VU37502 - Out-of-bounds read
CVE-2018-7438		 CWE-125 High
No
No
 - 23.02.2018 SB2018022325
SB2018030129
SB2018030130
and 1 more
#VU37503 - Out-of-bounds read
CVE-2018-7439		 CWE-125 High
No
No
 - 23.02.2018 SB2018022326
SB2018030129
SB2018030130
and 1 more
#VU37559 - Exposure of sensitive information to an unauthorized actor
CVE-2018-6790		 CWE-200 Medium
No
No
 - 07.02.2018 SB2018020720
SB2018020844
SB2018020845
and 3 more
#VU37560 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-6791		 CWE-78 Medium
No
No
 - 07.02.2018 SB2018020720
SB2018020844
SB2018020845
and 4 more
#VU40055 - Memory corruption
CVE-2016-9118		 CWE-119 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40056 - NULL Pointer Dereference
CVE-2016-9117		 CWE-476 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more
#VU40057 - NULL Pointer Dereference
CVE-2016-9116		 CWE-476 Medium
No
No
 - 31.10.2016 SB2016102901
SB2017092622
SB2017011935
and 3 more


Showing elements 21 - 40 out of 204