Skip to contentOpensuse Leap vulnerabilities
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11036Fix available4.8 Medium
- signing-party project signing-party, debian linux, opensuse leap +2 moregpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling...CVE-2019-11627Fix available9.8 Critical
- dovecot, fedoraproject fedora, opensuse leap +2 moreIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login component crashes if...CVE-2019-11499Fix available7.5 High
- dovecot, fedoraproject fedora, opensuse leap +2 moreIn the IMAP Server in Dovecot 2.3.3 through 2.3.5.2, the submission-login service crashes when...CVE-2019-11494Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 more +4 moreAn off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the...CVE-2019-10131Fix available6.5 Medium
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11506Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer...CVE-2019-11505Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +10 more +12 moreA flaw was found in the Linux kernel's vfio interface implementation that permits violation of...CVE-2019-3882Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq +7 more +9 moreThe Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0...CVE-2019-11486Fix available7.0 High
- graphicsmagick, canonical ubuntu linux, debian linux +3 more +5 morecoders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating...CVE-2019-11474Fix available6.5 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions...CVE-2019-2698Public exploitFix availableEPSS 12.0%8.1 High
- oracle corporation java, apache cassandra, tomcat +15 more +17 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....CVE-2019-2684Fix availableEPSS 37.6%5.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2019-2628Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...CVE-2019-2627Fix available4.9 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +9 more +11 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2019-2614Fix available4.4 Medium
- oracle corporation java, canonical ubuntu linux, debian linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2019-2602Fix available7.5 High
- gnome evince, canonical ubuntu linux, debian linux +6 more +8 moreThe tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document...CVE-2019-11459Fix available5.5 Medium
- dovecot, opensuse leap +1 moreThe JSON encoder in Dovecot before 2.3.5.2 allows attackers to repeatedly crash the...CVE-2019-10691Fix available7.5 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksCVE-2019-9494Fix available5.9 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11035Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreHeap over-read in PHP EXIF extensionCVE-2019-11034Fix available4.8 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification...CVE-2018-16878Fix available6.2 Medium
- clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 moreA flaw was found in the way pacemaker's client-server authentication was implemented in versions...CVE-2018-16877Fix available8.8 High
- freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreFreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is...CVE-2019-11235Fix available9.8 Critical
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash...CVE-2019-10903Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was...CVE-2019-10901Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This...CVE-2019-10899Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was...CVE-2019-10896Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash....CVE-2019-10895Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...CVE-2019-10894Fix available7.5 High
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage...CVE-2019-11010Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11009Fix available8.1 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function...CVE-2019-11008Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11007Fix available8.1 High
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11006Fix available9.1 Critical
- graphicsmagick, opensuse leap +1 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the...CVE-2019-11005Fix available9.8 Critical
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- roundcube webmail, fedoraproject fedora, opensuse backports sle +1 more +3 moreIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...CVE-2019-10740Fix available4.3 Medium
- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formattingCVE-2019-10906Fix available8.6 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- redhat libvirt, fedoraproject fedora, opensuse leap +2 moreAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...CVE-2019-3886Fix available5.4 Medium
- cisco clamav, debian linux, opensuse leap +2 moreClamAV OLE2 File Out-Of-Bounds Write VulnerabilityCVE-2019-1788Fix available7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClam AntiVirus PDF Denial of Service VulnerabilityCVE-2019-1787Fix available7.5 High
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- Show moreLoading…