Known vulnerabilities in SUSE Package Hub for SUSE Linux Enterprise - page 7

Vendor: SUSE
Software: SUSE Package Hub for SUSE Linux Enterprise
Software CPE: cpe:2.3:a:suse:suse_package_hub_for_suse_linux_enterprise:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 204
Public exploits: 20
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE Package Hub for SUSE Linux Enterprise SUSE Package Hub for SUSE Linux Enterprise is affected by 204 known vulnerabilities: 2 critical, 83 high, 57 medium, 62 low Critical High Medium Low

Vulnerabilities (204)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21766 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3828		 CWE-22 High
No
No
 - 14.10.2019 SB2019032710
SB2019081432
SB2019062713
and 13 more
#VU18860 - Permissions, Privileges, and Access Controls
CVE-2019-11708		 CWE-264 High
Available
Exploited
 - 20.06.2019 SB2019062002
SB2019062101
SB2019062102
and 19 more
#VU18824 - Type confusion
CVE-2019-11707		 CWE-843 Critical
Available
Exploited
 - 18.06.2019 SB2019061805
SB2019061904
SB2019061905
and 21 more
#VU18800 - Type confusion
CVE-2019-11706		 CWE-843 Low
Available
No
 - 14.06.2019 SB2019061401
SB2019061402
SB2019061404
and 10 more
#VU18799 - Stack-based buffer overflow
CVE-2019-11705		 CWE-121 High
Available
No
 - 14.06.2019 SB2019061401
SB2019061402
SB2019061404
and 10 more
#VU18798 - Heap-based Buffer Overflow
CVE-2019-11704		 CWE-122 High
Available
No
 - 14.06.2019 SB2019061401
SB2019061402
SB2019061404
and 10 more
#VU18797 - Heap-based Buffer Overflow
CVE-2019-11703		 CWE-122 High
Available
No
 - 14.06.2019 SB2019061401
SB2019061402
SB2019061404
and 10 more
#VU18572 - Out-of-bounds read
CVE-2019-5798		 CWE-125 Low
No
No
 - 22.05.2019 SB2019052204
SB2019052212
SB2019052401
and 13 more
#VU18568 - Memory corruption
CVE-2019-9800		 CWE-119 High
No
No
 - 22.05.2019 SB2019052103
SB2019052104
SB2019052201
and 19 more
#VU18554 - Use After Free
CVE-2019-9820		 CWE-416 High
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 18 more
#VU18553 - Improper input validation
CVE-2019-9819		 CWE-20 High
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 19 more
#VU18552 - Use After Free
CVE-2019-9818		 CWE-416 High
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052204
and 5 more
#VU18551 - Permissions, Privileges, and Access Controls
CVE-2019-9817		 CWE-264 Medium
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 19 more
#VU18550 - Type confusion
CVE-2019-9816		 CWE-843 Medium
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052201
and 16 more
#VU18549 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-9815		 CWE-362 Medium
No
No
 - 21.05.2019 SB2019052103
SB2019052104
SB2019052204
and 5 more
#VU18036 - Permissions, Privileges, and Access Controls
CVE-2019-9797		 CWE-264 Low
No
No
 - 21.03.2019 SB2019032101
SB2019032603
SB2019032806
and 17 more
#VU17708 - Use After Free
CVE-2019-7317		 CWE-416 Low
No
No
 - 14.02.2019 SB2019011606
SB2019041812
SB2019042401
and 45 more
#VU16629 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16876		 CWE-200 Low
No
No
 - 19.12.2018 SB2018122008
SB2019022302
SB2019031413
and 9 more
#VU16312 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16859		 CWE-200 Low
No
No
 - 05.12.2018 SB2018120610
SB2019022302
SB2019081432
and 8 more
#VU15721 - Exposure of sensitive information to an unauthorized actor
CVE-2018-16837		 CWE-200 Low
No
No
 - 05.11.2018 SB2018110510
SB2019081432
SB2019062713
and 4 more


Showing elements 121 - 140 out of 204