Skip to contentOpensuse Leap vulnerabilities
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a...CVE-2019-15215Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a...CVE-2019-15212Fix available4.6 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a...CVE-2019-15211Fix available4.6 Medium
- imagemagick, opensuse leap +1 moreWriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of...CVE-2019-15141Fix available6.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, DjVmDir.cpp in the DJVU reader component allows attackers to cause a denial...CVE-2019-15142Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the bitmap reader component allows attackers to cause a denial-of-service...CVE-2019-15143Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreIn DjVuLibre 3.5.27, the sorting functionality (aka GArrayTemplate<TYPE>::sort) allows attackers...CVE-2019-15144Fix available5.5 Medium
- djvulibre project djvulibre, canonical ubuntu linux, debian linux +2 more +4 moreDjVuLibre 3.5.27 allows attackers to cause a denial-of-service attack (application crash via an...CVE-2019-15145Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 morecheck_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion,...CVE-2019-15118Fix available5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moredrivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.8 has a NULL pointer...CVE-2019-15098Fix available4.6 Medium
- squid-cache squid, canonical ubuntu linux, debian linux +2 more +4 moreDue to incorrect string termination, Squid cachemgr.cgi 4.0 through 4.7 may access unallocated...CVE-2019-12854Fix availableEPSS 11.7%7.5 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient URL encoding flaw in allowed script location checkCVE-2019-9852Fix available7.8 High
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreLibreLogo global-event script executionCVE-2019-9851Public exploitFix availableEPSS 77.8%9.8 Critical
- document foundation libreoffice, canonical ubuntu linux, debian linux +2 more +4 moreInsufficient url validation allowing LibreLogo script executionCVE-2019-9850Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the...CVE-2019-15090Fix available6.7 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 more_TIFFCheckMalloc and _TIFFCheckRealloc in tif_aux.c in LibTIFF through 4.0.10 mishandle Integer...CVE-2019-14973Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 25.4%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 82.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- bluetooth br/edr, apple iphone os, mac os x +145 more +147 moreBlutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiationCVE-2019-9506Public exploitFix available7.6 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreAn issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference...CVE-2019-15216Fix available4.6 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound...CVE-2019-15214Fix available6.4 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero...CVE-2019-14981Fix available6.5 Medium
- imagemagick, opensuse leap +1 moreIn ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free...CVE-2019-14980Fix available6.5 Medium
- palletsprojects werkzeug, opensuse leap +1 morePallets Werkzeug Insufficient EntropyCVE-2019-14806Fix available7.5 High
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_process_user_comment in EXIF extensionCVE-2019-11042Fix available4.8 Medium
- php, apple mac os x, canonical ubuntu linux +4 more +6 moreheap-buffer-overflow on exif_scan_thumbnail in EXIF extensionCVE-2019-11041Fix available4.8 Medium
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a...CVE-2019-13106Fix available7.8 High
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to...CVE-2019-13104Fix available7.8 High
- schismtracker schism tracker, opensuse backports, leap +2 moreAn issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow...CVE-2019-14524Fix available7.8 High
- opencv, opensuse leap +1 moreOut-of-bounds Read and Out-of-bounds Write in OpenCVCVE-2019-14492Fix available7.5 High
- djangoproject django, opensuse leap +1 moreUncontrolled Recursion in DjangoCVE-2019-14235Fix available7.5 High
- djangoproject django, opensuse leap +1 moreDjango Denial-of-service in strip_tags()CVE-2019-14233Fix available7.5 High
- djangoproject django, djangoblog project djangoblog, opensuse leap +2 moreDjango Denial-of-service in django.utils.text.TruncatorCVE-2019-14232Fix available7.5 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering function of...CVE-2019-5060Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XPM image rendering functionality of...CVE-2019-5059Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the XCF image rendering functionality of...CVE-2019-5058Fix available8.8 High
- red hat sdl, libsdl sdl2 image, opensuse backports sle +1 more +3 moreAn exploitable code execution vulnerability exists in the PCX image-rendering functionality of...CVE-2019-5057Fix available8.8 High
- icedtea icedtea-web, debian linux, opensuse leap +2 moreIt was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip...CVE-2019-10185Fix available8.2 High
- icedtea icedtea-web, debian linux, opensuse leap +2 moreIt was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be...CVE-2019-10181Fix available6.3 Medium
- containers podman, libpod project libpod, opensuse leap +2 morePodman Path Traversal Vulnerability leads to arbitrary file read/writeCVE-2019-10152Fix available7.5 High
- openmpt libopenmpt, opensuse leap +1 moreJ2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.CVE-2019-14383Fix available6.5 Medium
- openmpt libopenmpt, opensuse leap +1 morelibopenmpt before 0.3.13 allows a crash with malformed MED files.CVE-2018-20860Fix available6.5 Medium
- gnu binutils, canonical ubuntu linux, netapp hci management node +2 more +4 moreapply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows...CVE-2019-14444Fix available5.5 Medium
- docker, debian linux, opensuse leap +2 moreMoby Docker cp broken with debian containersCVE-2019-14271Public exploitFix availableEPSS 18.8%9.8 Critical
- Show moreLoading…