Skip to contentOpensuse Backports Sle vulnerabilities
- opensuse leap 15.1, suse mailman, linux enterprise server 11 +2 more +4 moreLocal privilege escalation from user wwwrun to root in the packaging of mailmanCVE-2019-3693Fix available7.7 High
- phpmyadmin, fedoraproject fedora, opensuse backports sle +1 more +3 moreSQL injection in phpMyAdminCVE-2019-18622Fix available9.8 Critical
- google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13719Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13718Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreIncorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13717Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed...CVE-2019-13716Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70...CVE-2019-13715Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to...CVE-2019-13714Fix available6.1 Medium
- google chrome, opensuse backports sle +1 moreInsufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70...CVE-2019-13710Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13709Fix available6.5 Medium
- google chrome, opensuse backports sle +1 moreInappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed...CVE-2019-13708Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreOut of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13706Fix available7.8 High
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13704Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInsufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70...CVE-2019-13703Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreInappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70...CVE-2019-13702Fix available7.8 High
- google chrome, opensuse backports sle +1 moreIncorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote...CVE-2019-13701Fix available4.3 Medium
- google chrome, opensuse backports sle +1 moreOut of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a...CVE-2019-13700Fix available8.8 High
- google chrome, opensuse backports sle +1 moreUse after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had...CVE-2019-13699Fix available8.8 High
- osgeo gdal, debian linux, fedoraproject fedora +3 more +5 moreGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the...CVE-2019-17545Fix available9.8 Critical
- nongnu libntlm, canonical ubuntu linux, debian linux +3 more +5 moreLibntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge,...CVE-2019-17455Fix available9.8 Critical
- red hat ansible, redhat ansible engine, debian linux +3 more +5 moreAnsible Uses Plugins That Disclose CredentialsCVE-2019-14846Fix available7.3 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- nic bird, debian linux, fedoraproject fedora +1 more +3 moreBIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer...CVE-2019-16159Fix available7.5 High
- imapfilter project imapfilter, debian linux, fedoraproject fedora +2 more +4 moreIMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.CVE-2016-10937Fix available7.5 High
- red hat ansible, debian linux, opensuse backports sle +1 more +3 moreAnsible password prompts could expose passwordsCVE-2019-10206Fix available6.4 Medium
- kde kconfig, canonical ubuntu linux, debian linux +5 more +7 moreIn KDE Frameworks KConfig before 5.61.0, malicious desktop files and configuration files lead to...CVE-2019-14744Fix available7.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering function of...CVE-2019-5060Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering functionality of...CVE-2019-5059Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...CVE-2019-5058Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the PCX image-rendering functionality of...CVE-2019-5057Fix available8.8 High
- mcpp project mcpp, opensuse backports sle, leap +2 moreMCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.CVE-2019-14274Fix available5.5 Medium
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 morelavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has...CVE-2019-13962Fix available9.8 Critical
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +10 more +12 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-13616Fix available8.1 High
- videolan vlc media player, canonical ubuntu linux, debian linux +2 more +4 moreAn Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media...CVE-2019-13602Fix available7.8 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in...CVE-2019-5051Fix available8.8 High
- canonical ubuntu linux, cisco systems, inc. simple directmedia, debian linux +3 more +5 moreAn exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4....CVE-2019-5052Fix available8.8 High
- videolan vlc, vlc media player, opensuse backports +2 more +4 moreAn Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.CVE-2019-5459Fix available7.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...CVE-2019-12221Fix available6.5 Medium
- heimdal project heimdal, debian linux, fedoraproject fedora +2 more +4 moreIn the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key...CVE-2019-12098Fix available7.4 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11506Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11505Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...CVE-2019-11474Fix available6.5 Medium
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksCVE-2019-9494Fix available5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function...CVE-2019-11008Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11007Fix available8.1 High
- roundcube webmail, fedoraproject fedora, opensuse backports sle +1 more +3 moreIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...CVE-2019-10740Fix available4.3 Medium
- Show moreLoading…