Skip to contentOpensuse vulnerabilities
Newest
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- xmlsoft libxslt, canonical ubuntu linux, debian linux +19 more +21 moreNokogiri vulnerable to libxslt protection mechanism bypassCVE-2019-11068Fix available9.8 Critical
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DCERPC SPOOLSS dissector could crash...CVE-2019-10903Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the LDSS dissector could crash. This was...CVE-2019-10901Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the SRVLOC dissector could crash. This...CVE-2019-10899Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the DOF dissector could crash. This was...CVE-2019-10896Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the NetScaler file parser could crash....CVE-2019-10895Fix available7.5 High
- wireshark, canonical ubuntu linux, debian linux +2 more +4 moreIn Wireshark 2.4.0 to 2.4.13, 2.6.0 to 2.6.7, and 3.0.0, the GSS-API dissector could crash. This...CVE-2019-10894Fix available7.5 High
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage...CVE-2019-11010Fix available6.5 Medium
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11009Fix available8.1 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function...CVE-2019-11008Fix available8.8 High
- graphicsmagick, canonical ubuntu linux, debian linux +2 more +4 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11007Fix available8.1 High
- graphicsmagick, debian linux, opensuse leap +2 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the...CVE-2019-11006Fix available9.1 Critical
- graphicsmagick, opensuse leap +1 moreIn GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the...CVE-2019-11005Fix available9.8 Critical
- samba, debian linux, fedoraproject fedora +3 more +5 moreA flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry...CVE-2019-3880Fix available4.2 Medium
- roundcube webmail, fedoraproject fedora, opensuse backports sle +1 more +3 moreIn Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails...CVE-2019-10740Fix available4.3 Medium
- palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreJinja2 sandbox escape via string formattingCVE-2019-10906Fix available8.6 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- redhat libvirt, fedoraproject fedora, opensuse leap +2 moreAn incorrect permissions check was discovered in libvirt 4.8.0 and above. The readonly permission...CVE-2019-3886Fix available5.4 Medium
- cisco clamav, debian linux, opensuse leap +2 moreClamAV OLE2 File Out-Of-Bounds Write VulnerabilityCVE-2019-1788Fix available7.5 High
- cisco clamav, debian linux, opensuse leap +2 moreClam AntiVirus PDF Denial of Service VulnerabilityCVE-2019-1787Fix available7.5 High
- apache http server, canonical ubuntu linux, debian linux +2 more +4 moreA vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a...CVE-2019-0220Fix availableEPSS 17.9%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- gnu gnutls, fedoraproject fedora, opensuse leap +2 moreIt was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer...CVE-2019-3836Fix available5.9 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5846Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5845Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreOut of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5844Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a...CVE-2019-5804Fix available5.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75...CVE-2019-5803Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreIncorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75...CVE-2019-5802Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a...CVE-2019-5801Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5800Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreIncorrect inheritance of a new document's policy in Content Security Policy in Google Chrome...CVE-2019-5799Fix available6.5 Medium
- google chrome, opensuse backports sle, leap +2 moreData race in extensions guest view in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5796Public exploitFix available7.5 High
- google chrome, opensuse backports, leap +2 moreInteger overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...CVE-2019-5795Fix available8.8 High
- google chrome, opensuse backports sle, leap +2 moreIncorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75...CVE-2019-5794Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInsufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a...CVE-2019-5793Fix available6.5 Medium
- google chrome, opensuse backports, leap +2 moreInteger overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to...CVE-2019-5792Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreInappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker...CVE-2019-5791Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome...CVE-2019-5790Fix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior...CVE-2019-5789Public exploitFix available8.8 High
- google chrome, opensuse backports, leap +2 moreAn integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux...CVE-2019-5788Public exploitFix available8.8 High
- google chrome, opensuse backports, leap +2 moreUse-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote...CVE-2019-5787Fix available8.8 High
- dovecot, canonical ubuntu linux, debian linux +1 more +3 moreIn Dovecot before 2.2.36.3 and 2.3.x before 2.3.5.1, a local attacker can cause a buffer overflow...CVE-2019-7524Fix available8.8 High
- ntp, fedoraproject fedora, hpe hpux-ntp +3 more +5 moreNTP through 4.2.8p12 has a NULL Pointer Dereference.CVE-2019-8936Public exploitFix available7.5 High
- tianocore edk ii, extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), fedoraproject fedora +6 more +8 moreBuffer overflow in system firmware for EDK II may allow unauthenticated user to potentially...CVE-2019-0160Fix available8.7 High
- rubygems, debian linux, opensuse leap +2 moreRubyGems Escape sequence injection in errorsCVE-2019-8325Fix available7.5 High
- rubygems, debian linux, opensuse leap +1 more +3 moreCode injection in RubyGemsCVE-2019-8324Fix available8.8 High
- Show moreLoading…