Skip to contentOpensuse Leap vulnerabilities
- node.js, opensuse leap +1 moreIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...CVE-2019-5737Public exploitFix availableEPSS 16.2%7.5 High
- qemu, opensuse leap +1 morehw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares...CVE-2019-8934Fix available3.3 Low
- qt, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash...CVE-2018-19872Fix available5.5 Medium
- [unknown] openwsman, fedoraproject fedora, opensuse leap +2 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in...CVE-2019-3833Fix availableEPSS 15.2%7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97797.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...CVE-2019-97787.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...CVE-2019-97777.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97767.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...CVE-2019-97759.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...CVE-2019-97749.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...CVE-2019-97737.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97727.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97717.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...CVE-2019-97707.5 High
- [unknown] openwsman, fedoraproject fedora, opensuse leap +8 more +10 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure...CVE-2019-3816Fix availableEPSS 14.7%7.5 High
- otrs, opensuse backports sle, leap +2 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16...CVE-2019-9752Fix available5.4 Medium
- debian linux, fedoraproject fedora, opensuse leap +5 more +7 morePath Traversal in Action ViewCVE-2019-5418In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action ViewCVE-2019-5419Fix available7.5 High
- xmltooling project xmltooling, canonical ubuntu linux, opensuse leap +2 moreXMLTooling Library Incorrectly Handles Some ExceptionsCVE-2019-9628Fix available7.5 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), opensuse leap +2 moreBuffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially...CVE-2018-12180Fix available8.8 High
- php, canonical ubuntu linux, opensuse leap +2 more** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....CVE-2019-9675Fix availableDisputed8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9641Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9640Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9639Fix available7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9638Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to...CVE-2019-9637Fix available7.5 High
- python, canonical ubuntu linux, debian linux +16 more +18 morePython 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode...CVE-2019-9636Fix available9.8 Critical
- libjpeg-turbo, mozilla mozjpeg, debian linux +2 more +4 moreget_8bit_row in rdbmp.c in libjpeg-turbo through 1.5.90 and MozJPEG through 3.3.1 allows...CVE-2018-14498Fix available6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.CVE-2019-7175Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +2 more +4 moreIn the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap...CVE-2019-9213Public exploitFix available5.5 Medium
- debian linux, live555 streaming media, opensuse backports sle +1 more +3 moreIn Live555 before 2019.02.27, malformed headers lead to invalid memory access in the...CVE-2019-9215Fix available9.8 Critical
- wireshark, canonical ubuntu linux, debian linux +1 more +3 moreIn Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the ASN.1 BER and related dissectors could crash...CVE-2019-9209Fix available5.5 Medium
- redhat libvirt, opensuse leap +1 moreA NULL pointer dereference flaw was discovered in libvirt before version 5.0.0 in the way it gets...CVE-2019-3840Fix available5.8 Medium
- kde kauth, fedoraproject fedora, opensuse backports +1 more +3 moreKDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as...CVE-2019-7443Fix available8.1 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- webkitgtk, canonical ubuntu linux, opensuse leap +1 more +3 moreThe UIProcess subsystem in WebKit, as used in WebKitGTK through 2.23.90 and WebKitGTK+ through 2...CVE-2019-8375Public exploitFix availableEPSS 15.7%9.8 Critical
- linux kernel, canonical ubuntu linux, netapp cn1610 firmware +4 more +6 moreIn the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c...CVE-2019-9003Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreA memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11...CVE-2019-8980Fix available7.5 High
- debian linux, linux kernel, canonical ubuntu linux +15 more +17 moreThe KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.CVE-2019-7222Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +12 more +14 moreThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.CVE-2019-7221Fix available7.8 High
- sqlalchemy, debian linux, opensuse backports sle +6 more +8 moreSQLAlchemy vulnerable to SQL Injection via order_by parameterCVE-2019-7164Fix available9.8 Critical
- qemu, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreQEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of...CVE-2019-3812Fix available4.4 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +1 more +3 moreIn the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL...CVE-2019-8912Fix available7.8 High
- file project file, canonical ubuntu linux, debian linux +1 more +3 moredo_core_note in readelf.c in libmagic.a in file 5.35 allows remote attackers to cause a denial of...CVE-2019-8907Fix available8.8 High
- file project file, apple iphone os, mac os x +4 more +6 moredo_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is...CVE-2019-8906Fix available4.4 Medium
- file project file, canonical ubuntu linux, debian linux +1 more +3 moredo_core_note in readelf.c in libmagic.a in file 5.35 has a stack-based buffer over-read, related...CVE-2019-8905Fix available4.4 Medium
- systemd project systemd, canonical ubuntu linux, debian linux +19 more +21 moreAn issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus...CVE-2019-6454Fix available5.5 Medium
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9024Fix available7.5 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9023Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x...CVE-2019-9021Fix availableEPSS 10.1%9.8 Critical
- Show moreLoading…