Skip to contentOpensuse Leap vulnerabilities
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9020Fix availableEPSS 10.1%9.8 Critical
- pocoo jinja2, opensuse leap +1 more** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to...CVE-2019-8341Public exploitDisputedEPSS 43.9%9.8 Critical
- python python-gnupg, canonical ubuntu linux, debian linux +2 more +4 moreImproper Input Validation python-gnupgCVE-2019-6690Public exploitFix available7.5 High
- docker, linuxfoundation runc, apache mesos +15 more +17 morerunc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to...CVE-2019-5736Public exploitFix availableEPSS 98.5%8.6 High
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreIn elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in...CVE-2019-7665Fix available5.5 Medium
- libtiff, canonical ubuntu linux, debian linux +1 more +3 moreAn Invalid Address dereference was discovered in TIFFWriteDirectoryTagTransferfunction in libtiff...CVE-2019-7663Fix available6.5 Medium
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7638Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...CVE-2019-7637Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7636Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +3 more +5 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7635Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7578Fix available8.1 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...CVE-2019-7577Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7576Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer...CVE-2019-7575Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7574Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a heap-based buffer over...CVE-2019-7573Fix available8.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +2 more +4 moreSDL (Simple DirectMedia Layer) through 1.2.15 and 2.x through 2.0.9 has a buffer over-read in...CVE-2019-7572Fix available8.8 High
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy is vulnerable to SQL Injection via group_by parameterCVE-2019-7548Fix available7.8 High
- gnome gnome-shell, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that the gnome-shell lock screen since version 3.15.91 did not properly...CVE-2019-3820Fix available4.8 Medium
- dovecot, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...CVE-2019-3814Fix available7.7 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.CVE-2019-7398Fix available7.5 High
- graphicsmagick, imagemagick, canonical ubuntu linux +2 more +4 moreIn ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in...CVE-2019-7397Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.CVE-2019-7396Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.CVE-2019-7395Fix available7.5 High
- libpng, canonical ubuntu linux, debian linux +29 more +31 morepng_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because...CVE-2019-7317Fix available5.3 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0...CVE-2019-1000020Fix available6.5 Medium
- libarchive, canonical ubuntu linux, debian linux +5 more +7 morelibarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release v3.0.2...CVE-2019-1000019Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 morekernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds...CVE-2019-7308Fix available5.6 Medium
- schedmd slurm, opensuse leap +1 moreSchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.CVE-2019-6438Fix available9.8 Critical
- mozilla firefox, canonical ubuntu linux, debian linux +9 more +11 moreWhen proxy auto-detection is enabled, if a web server serves a Proxy Auto-Configuration (PAC)...CVE-2018-18506Fix available5.9 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +8 more +10 moreAn issue was discovered in elfutils 0.175. A segmentation fault can occur in the function...CVE-2019-7150Fix available5.5 Medium
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreIn QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.CVE-2019-6778Fix available7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreA flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid...CVE-2019-3819Fix available4.2 Medium
- golang go, debian linux, opensuse leap +2 moreGo before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...CVE-2019-6486Fix available8.2 High
- artifex ghostscript, canonical ubuntu linux, debian linux +8 more +10 moreIn Artifex Ghostscript through 9.26, ephemeral or transient procedures can allow access to system...CVE-2019-6116Public exploitFix availableEPSS 41.6%7.8 High
- gnu glibc, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would...CVE-2016-10739Fix available5.3 Medium
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...CVE-2018-8800Fix available9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...CVE-2018-8797Fix available9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...CVE-2018-8795Fix available9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to an Out-Of...CVE-2018-8794Fix available9.8 Critical
- check point software technologies ltd. rdesktop, debian linux, opensuse leap +2 morerdesktop versions up to and including v1.8.3 contain a Heap-Based Buffer Overflow in function...CVE-2018-8793Fix available9.8 Critical
- rdesktop, debian linux, opensuse backports +1 more +3 morerdesktop versions up to and including v1.8.3 contain an Integer Overflow that leads to a Heap...CVE-2018-20177Fix available9.8 Critical
- python, debian linux, opensuse leap +4 more +6 moreAn exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python...CVE-2019-5010Public exploitFix availableEPSS 20.7%5.9 Medium
- oracle corporation java, hp xp7 command view, netapp oncommand unified manager +5 more +7 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). Supported...CVE-2019-2426Fix available3.7 Low
- oracle corporation java, canonical ubuntu linux, debian linux +16 more +18 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). Supported...CVE-2019-2422Fix available3.1 Low
- fedoraproject sssd, debian linux, fedoraproject fedora +2 more +4 moreA vulnerability was found in sssd. If a user was configured with no home directory set, sssd...CVE-2019-3811Fix available4.1 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found in Ceph versions before 13.2.4 that authenticated ceph RGW users can cause a denial...CVE-2018-16846Fix available6.5 Medium
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreIt was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions...CVE-2018-14662Fix available3.5 Low
- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreWebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon...CVE-2019-6251Fix available8.1 High
- libtiff, canonical ubuntu linux, debian linux +1 more +3 moreThe TIFFFdOpen function in tif_unix.c in LibTIFF 4.0.10 has a memory leak, as demonstrated by...CVE-2019-6128Fix available8.8 High
- Show moreLoading…