Skip to contentOpensuse vulnerabilities
Newest
- xmlsoft libxslt, apple icloud, iphone os +22 more +24 morelibxslt Type Confusion vulnerability that affects NokogiriCVE-2019-13118Fix available5.3 Medium
- xmlsoft libxslt, canonical ubuntu linux, debian linux +3 more +5 moreUninitialized read in Nokogiri gemCVE-2019-13117Fix available5.3 Medium
- gnupg, sks keyserver project keyserver, f5 traffix signaling delivery controller +2 more +4 moreInteraction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG...CVE-2019-13050Fix available7.5 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings...CVE-2019-12979Fix available7.8 High
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c.CVE-2019-12976Fix available5.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c.CVE-2019-12975Fix available5.5 Medium
- uclouvain openjpeg, debian linux, opensuse leap +2 more +4 moreIn OpenJPEG 2.3.1, there is excessive iteration in the opj_t1_encode_cblks function of openjp2/t1...CVE-2019-12973Fix available5.5 Medium
- gnu binutils, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-12972Fix available5.5 Medium
- amd secure encrypted virtualization firmware, opensuse leap +1 moreSecure Encrypted Virtualization (SEV) on Advanced Micro Devices (AMD) Platform Security Processor...CVE-2019-9836Fix available5.3 Medium
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 morearch/powerpc/mm/mmu_context_book3s64.c in the Linux kernel before 5.1.15 for powerpc has a bug...CVE-2019-12817Fix available7.0 High
- libexpat project libexpat, canonical ubuntu linux, debian linux +9 more +11 moreIn libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of...CVE-2018-20843Fix available7.5 High
- powerdns authoritative, debian pdns, opensuse backports +1 more +3 moreA Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8...CVE-2019-10163Fix available3.5 Low
- powerdns authoritative, debian pdns, opensuse leap +2 moreA vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8...CVE-2019-10162Fix available3.5 Low
- postgresql, fedoraproject fedora, opensuse leap +1 more +3 morePostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack...CVE-2019-10164Fix available7.5 High
- gnupg libgcrypt, opensuse leap, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel...CVE-2019-12904Fix availableDisputed5.9 Medium
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a...CVE-2019-5840Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreExcessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5839Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed...CVE-2019-5838Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreResource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a...CVE-2019-5837Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreHeap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...CVE-2019-5836Fix available8.8 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreObject lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5835Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-58346.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed...CVE-2019-5833Fix available4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed...CVE-2019-5832Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to...CVE-2019-5831Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5830Fix available6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInteger overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5829Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreObject lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote...CVE-2019-5828Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreA flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies...CVE-2019-10126Fix available5.9 Medium
- opensuse backports, leap, videolan vlc media player +2 moreDouble Free in VLC versions <= 3.0.6 leads to a crash.CVE-2019-5460Fix available5.5 Medium
- videolan vlc, vlc media player, opensuse backports +2 more +4 moreAn Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.CVE-2019-5459Fix available7.1 High
- libgd, php, canonical ubuntu linux +10 more +12 moreUninitialized read in gdImageCreateFromXbmCVE-2019-11038Fix available3.1 Low
- python, canonical ubuntu linux, debian linux +14 more +16 moreA security regression of CVE-2019-9636 was discovered in python since commit...CVE-2019-10160Fix available9.8 Critical
- linux kernel, canonical ubuntu linux, debian linux +9 more +11 moreA flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in...CVE-2019-3846Fix available8.0 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreAn issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in...CVE-2019-12614Fix available4.1 Medium
- php, debian linux, opensuse leap +1 more +3 moreHeap buffer overflow in EXIF extensionCVE-2019-11040Fix available4.8 Medium
- php, debian linux, opensuse leap +1 more +3 moreOut-of-bounds read in iconv.cCVE-2019-11039Fix available4.2 Medium
- sqlite, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreSQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the...CVE-2019-8457Fix availableEPSS 45.4%9.8 Critical
- gnome glib, canonical ubuntu linux, debian linux +6 more +8 morefile_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict...CVE-2019-12450Fix available9.8 Critical
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12449Fix available5.7 Medium
- gnome gvfs, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c mishandles...CVE-2019-12447Fix available7.3 High
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreInteger overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote...CVE-2019-5827Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreParameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote...CVE-2019-5824Fix available8.8 High
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- libsdl simple directmedia layer, canonical ubuntu linux, debian linux +4 more +6 moreAn issue was discovered in libSDL2.a in Simple DirectMedia Layer (SDL) 2.0.9 when used in...CVE-2019-12221Fix available6.5 Medium
- heimdal project heimdal, debian linux, fedoraproject fedora +2 more +4 moreIn the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key...CVE-2019-12098Fix available7.4 High
- sylabs singularity, fedoraproject fedora, opensuse backports +1 more +3 moreIncorrect Permission Assignment for Critical Resource in SingularityCVE-2019-11328Fix available8.8 High
- rust-lang rust, fedoraproject fedora, opensuse leap +2 moreThe Rust Programming Language Standard Library 1.34.x before 1.34.2 contains a stabilized method...CVE-2019-12083Fix available8.1 High
- debian linux, linux kernel, canonical ubuntu linux +9 more +11 moreThe do_hidp_sock_ioctl function in net/bluetooth/hidp/sock.c in the Linux kernel before 5.0.15...CVE-2019-11884Fix available3.3 Low
- Show moreLoading…