Skip to contentOpensuse Leap vulnerabilities
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- gnu gnutls, fedoraproject fedora, opensuse leap +2 moreIt was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...CVE-2019-3836Fix available5.9 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5846Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5845Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5844Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a...CVE-2019-5804Fix available5.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75...CVE-2019-5803Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreIncorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75...CVE-2019-5802Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a...CVE-2019-5801Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5800Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect inheritance of a new document's policy in Content Security Policy in Google Chrome...CVE-2019-5799Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreData race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5796Public exploitFix available7.5 High
- google chrome, opensuse backports, leap +2 moreInteger overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...CVE-2019-5795Fix available8.8 High
- google chrome, opensuse backports sle, leap +2 moreIncorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75...CVE-2019-5794Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a...CVE-2019-5793Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInteger overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...CVE-2019-5792Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreInappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker...CVE-2019-5791Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome...CVE-2019-5790Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior...CVE-2019-5789Public exploitFix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux...CVE-2019-5788Public exploitFix available8.8 High
- google chrome, opensuse backports, leap +2 moreUse-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5787Fix available8.8 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow...CVE-2019-7524Fix available8.8 High
- ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 moreNTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936Public exploitFix available7.5 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection in errorsCVE-2019-8325Fix available7.5 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in api response handlingCVE-2019-8323Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in gem ownerCVE-2019-8322Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in verboseCVE-2019-8321Fix available7.5 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...CVE-2019-9923Fix available7.5 High
- gnu bash, canonical ubuntu linux, debian linux +3 more +5 morerbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...CVE-2019-9924Fix available7.8 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- putty, debian linux, fedoraproject fedora +2 more +4 morePotential recycling of random numbers used in cryptography exists within PuTTY before 0.71.CVE-2019-9898Fix available9.8 Critical
- putty, debian linux, fedoraproject fedora +2 more +4 moreMultiple denial-of-service attacks that can be triggered by writing to the terminal exist in...CVE-2019-9897Fix available7.5 High
- putty, opensuse backports sle, leap +2 moreIn PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting...CVE-2019-9896Public exploit7.8 High
- putty, debian linux, fedoraproject fedora +2 more +4 moreA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before...CVE-2019-9894Fix available7.5 High
- node.js, opensuse leap +1 moreKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...CVE-2019-5739Fix available7.5 High
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- Show moreLoading…