[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feHg58VSTGayOEwID2tJsEhKup3yQVnJNbc7IzS-UUiQ":3,"g5a-family:suse\u002Fpackage_hub":98,"g5a-ex:suse\u002Fpackage_hub@*":99},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":70,"seoMetadata":76,"meta":95},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"suse","package_hub",0,39,1,"2020-08-19",[],"Package Hub by Suse is a technology product and 39 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,25,33,39,44,49,52,57,61,65],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":4,"epssScore":24},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",8.8,"v3.1","High",0.4811,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":32},"CVE-2019-11730","A vulnerability exists where if a user opens a locally saved HTML file, this file can use file: URIs to access other files in the same directory or sub-directories if the names are known or guessed. The Fetch API can then be used to read the contents of any files stored in these directories and they may uploaded to a server. It was demonstrated that in combination with a popular Android messaging app, if a malicious HTML attachment is sent to a user and they opened that attachment in Firefox, due to that app's predictable pattern for locally-saved file names, it is possible to read attachments the victim received from other correspondents. This vulnerability affects Firefox ESR \u003C 60.8, Firefox \u003C 68, and Thunderbird \u003C 60.8.","2019-07-23",6.5,"Medium",false,0.20271,{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":38},"CVE-2019-19926","multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.","2019-12-23",7.5,0.08023,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":37,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":43},"CVE-2019-19880","exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.","2019-12-18",0.06937,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":37,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":48},"CVE-2019-19923","flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).","2019-12-24",0.0681,{"cveId":50,"description":51,"publishedDate":47,"cvssScore":37,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":48},"CVE-2019-19925","zipfileUpdate in ext\u002Fmisc\u002Fzipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.",{"cveId":53,"description":54,"publishedDate":55,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":56},"CVE-2019-13764","Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2019-12-10",0.06432,{"cveId":58,"description":59,"publishedDate":55,"cvssScore":21,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":60},"CVE-2019-13734","Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.03948,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":37,"cvssVersion":22,"severity":23,"isKev":31,"epssScore":64},"CVE-2020-24368","Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web 2. This issue is fixed in Icinga Web 2 in v2.6.4, v2.7.4 and v2.8.2.",0.0328,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":29,"cvssVersion":22,"severity":30,"isKev":31,"epssScore":69},"CVE-2019-5798","Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.","2019-05-23",0.03207,[71],{"cveId":18,"description":19,"publishedDate":20,"cvssScore":21,"severity":23,"isKev":4,"epssScore":24,"cisaVulnName":72,"cisaDateAdded":73,"cisaShortDescription":74,"cisaRequiredAction":75},"Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","Apply updates per vendor instructions.",{"title":77,"metaDescription":78,"keywords":79,"structuredData":80},"Package Hub by Suse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Package Hub by Suse with 39 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Package Hub vulnerabilities, Package Hub security, Package Hub CVE, Suse Package Hub, Package Hub threat intelligence, Suse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Package Hub KEV, Package Hub exploited vulnerabilities",{"@context":81,"@type":82,"name":83,"description":78,"url":84,"manufacturer":85,"applicationCategory":89,"softwareVersion":90,"mainEntity":91},"https:\u002F\u002Fschema.org","SoftwareApplication","Package Hub","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsuse\u002Fpackage_hub",{"@type":86,"name":87,"url":88},"Organization","Suse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsuse","Security Software","Multiple versions",{"@type":92,"name":93,"description":94,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Package Hub Security Vulnerabilities","Security vulnerabilities affecting Package Hub by Suse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":96,"apiVersion":97},"2026-10-17T22:46:09.574Z","3.0",[],{"rows":100,"total":11,"capped":31,"failed":9},[101],{"cveId":18,"name":72,"severity":23,"cvss":21,"added":73,"epss":24,"published":102,"ranges":103,"checked":4,"hits":104,"covers":31},"2016-03-29T10:59:00.16",[],[]]