Skip to contentOpensuse Leap vulnerabilities
- upx, opensuse backports, leap +2 moreAn invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in...CVE-2019-20053Fix available5.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200096.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in...CVE-2019-200118.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200126.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted...CVE-2019-200136.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.CVE-2019-200148.8 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive...CVE-2019-200156.5 Medium
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in...CVE-2019-200108.8 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack buffer overflow, which could be triggered...CVE-2019-15695Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow, which could be triggered...CVE-2019-15694Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to heap buffer overflow. Vulnerability could be...CVE-2019-15692Fix available7.2 High
- kaspersky tigervnc, opensuse leap +1 moreTigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to...CVE-2019-15691Fix available7.2 High
- debian linux, linux kernel, canonical ubuntu linux +13 more +15 moreIn the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas...CVE-2019-19965Fix available4.7 Medium
- debian linux, linux kernel, netapp active iq unified manager +10 more +12 moreIn the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb...CVE-2019-19966Fix available4.6 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 High
- sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage...CVE-2019-19948Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and...CVE-2019-19950Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function...CVE-2019-19951Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...CVE-2019-19953Fix available9.1 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage...CVE-2019-19949Fix available9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18391Fix available5.5 Medium
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreAn out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...CVE-2019-18390Fix available7.1 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18389Fix available7.8 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +2 moreA NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS...CVE-2019-18388Fix available5.5 Medium
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.CVE-2019-199177.8 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.CVE-2019-199187.8 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- rack, fedoraproject fedora, opensuse leap +2 morePossible Information Leak / Session Hijack Vulnerability in RackCVE-2019-16782Fix available6.3 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- excon, debian linux, opensuse backports sle +1 more +3 moreIn RubyGem excon, interrupted Persistent Connections May Leak Response DataCVE-2019-16779Fix available5.8 Medium
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreArbitrary File Overwrite in npm CLICVE-2019-16777Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16776Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16775Fix available7.7 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a...CVE-2019-19583Fix available7.5 High
- cacti, debian linux, opensuse leap +2 moreCacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...CVE-2019-17358Fix available8.1 High
- git-scm git, debian linux, fedoraproject fedora +1 more +3 moreArbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before...CVE-2019-19604Fix available7.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +2 more +4 moreA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive...CVE-2019-1351Public exploitFix available7.5 High
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14870Fix available5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14861Fix available5.3 Medium
- git-for-windows git, opensuse leap +1 moreCVE-2019-1353 does not affect BellSoft softwareCVE-2019-1353Fix available9.8 Critical
- git-for-windows git, opensuse leap +1 moreCVE-2019-1348 does not affect BellSoft softwareCVE-2019-1348Fix available3.3 Low
- Show moreLoading…