Skip to contentOpensuse vulnerabilities
Newest
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in api response handlingCVE-2019-8323Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in gem ownerCVE-2019-8322Fix available7.5 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection vulnerability in verboseCVE-2019-8321Fix available7.5 High
- python, canonical ubuntu linux, debian linux +11 more +13 moreurllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for...CVE-2019-9948Fix availableEPSS 11.8%9.1 Critical
- gnu tar, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morepax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing...CVE-2019-9923Fix available7.5 High
- gnu bash, canonical ubuntu linux, debian linux +3 more +5 morerbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus...CVE-2019-9924Fix available7.8 High
- artifex ghostscript, debian linux, fedoraproject fedora +9 more +11 moreIt was found that the forceput operator could be extracted from the DefineResource method in...CVE-2019-3838Fix available7.3 High
- artifex ghostscript, debian linux, fedoraproject fedora +8 more +10 moreIt was found that the superexec operator was available in the internal dictionary in ghostscript...CVE-2019-3835Fix available7.3 High
- putty, debian linux, fedoraproject fedora +2 more +4 morePotential recycling of random numbers used in cryptography exists within PuTTY before 0.71.CVE-2019-9898Fix available9.8 Critical
- putty, debian linux, fedoraproject fedora +2 more +4 moreMultiple denial-of-service attacks that can be triggered by writing to the terminal exist in...CVE-2019-9897Fix available7.5 High
- putty, opensuse backports sle, leap +2 moreIn PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting...CVE-2019-9896Public exploit7.8 High
- putty, debian linux, fedoraproject fedora +2 more +4 moreA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before...CVE-2019-9894Fix available7.5 High
- node.js, opensuse leap +1 moreKeep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js...CVE-2019-5739Fix available7.5 High
- libssh2, debian linux, netapp ontap select deploy administration utility +10 more +12 moreA flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive...CVE-2019-3863Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way...CVE-2019-3862Fix available7.3 High
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a...CVE-2019-3861Fix available5.0 Medium
- libssh2, debian linux, netapp ontap select deploy administration utility +4 more +6 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with...CVE-2019-3860Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require...CVE-2019-3859Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +5 more +7 moreAn out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP...CVE-2019-3858Fix available5.0 Medium
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3857Fix available7.5 High
- libssh2, debian linux, fedoraproject fedora +13 more +15 moreAn integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2...CVE-2019-3856Fix available7.5 High
- libssh2, apple xcode, debian linux +14 more +16 moreAn integer overflow flaw which could lead to an out of bounds write was discovered in libssh2...CVE-2019-3855Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +4 more +6 moreLack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5798Fix available6.5 Medium
- hcl software leap, suse linux enterprise server 15, linux enterprise server +1 more +3 moreyast2-rmt exposes CA private key passhrase in log-fileCVE-2018-20105Fix available4.0 Medium
- node.js, opensuse leap +1 moreIn Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before...CVE-2019-5737Public exploitFix availableEPSS 16.2%7.5 High
- qemu, opensuse leap +1 morehw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares...CVE-2019-8934Fix available3.3 Low
- qt, fedoraproject fedora, opensuse leap +2 moreAn issue was discovered in Qt 5.11. A malformed PPM image causes a division by zero and a crash...CVE-2018-19872Fix available5.5 Medium
- opensuse yast2-printerSMB printer settings don't escape characters in passwords properlyCVE-2018-201066.5 Medium
- opensuse yast2-samba-provisionPassword exposed in process listingCVE-2018-17956Fix available3.3 Low
- opensuse yast2-multipathStatic tempfile name allows overwriting of arbitrary filesCVE-2018-17955Fix available2.2 Low
- [unknown] openwsman, fedoraproject fedora, opensuse leap +2 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to infinite loop in...CVE-2019-3833Fix availableEPSS 15.2%7.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97797.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...CVE-2019-97787.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read...CVE-2019-97777.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97767.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...CVE-2019-97759.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the...CVE-2019-97749.1 Critical
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...CVE-2019-97737.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97727.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in...CVE-2019-97717.5 High
- gnu libredwg, opensuse backports sle, leap +2 moreAn issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow...CVE-2019-97707.5 High
- [unknown] openwsman, fedoraproject fedora, opensuse leap +8 more +10 moreOpenwsman, versions up to and including 2.6.9, are vulnerable to arbitrary file disclosure...CVE-2019-3816Fix availableEPSS 14.7%7.5 High
- otrs, opensuse backports sle, leap +2 moreAn issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16...CVE-2019-9752Fix available5.4 Medium
- debian linux, fedoraproject fedora, opensuse leap +5 more +7 morePath Traversal in Action ViewCVE-2019-5418In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- rubyonrails rails, debian linux, fedoraproject fedora +4 more +6 moreDenial of Service Vulnerability in Action ViewCVE-2019-5419Fix available7.5 High
- xmltooling project xmltooling, canonical ubuntu linux, opensuse leap +2 moreXMLTooling Library Incorrectly Handles Some ExceptionsCVE-2019-9628Fix available7.5 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), opensuse leap +2 moreBuffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially...CVE-2018-12180Fix available8.8 High
- php, canonical ubuntu linux, opensuse leap +2 more** DISPUTED ** An issue was discovered in PHP 7.x before 7.1.27 and 7.3.x before 7.3.3....CVE-2019-9675Fix availableDisputed8.1 High
- php, canonical ubuntu linux, debian linux +2 more +4 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9641Fix available9.8 Critical
- php, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3...CVE-2019-9640Fix available7.5 High
- Show moreLoading…