Skip to contentOpensuse vulnerabilities
Newest
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function...CVE-2019-19951Fix available9.8 Critical
- graphicsmagick, debian linux, opensuse backports +1 more +3 moreIn GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the...CVE-2019-19953Fix available9.1 Critical
- imagemagick, canonical ubuntu linux, debian linux +1 more +3 moreIn ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage...CVE-2019-19949Fix available9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +3 more +5 moreInsufficiently Protected Credentials in Apache TomcatCVE-2019-12418Fix available7.0 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- php, canonical ubuntu linux, debian linux +3 more +5 moreUse-after-free in exif parsing under memory sanitizerCVE-2019-11050Fix available4.8 Medium
- php, canonical ubuntu linux, debian linux +3 more +5 moreBuffer underflow in bc_shift_addsubCVE-2019-11046Fix available3.7 Low
- php, canonical ubuntu linux, debian linux +3 more +5 moreDirectoryIterator class silently truncates after a null byteCVE-2019-11045Fix available3.7 Low
- sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18391Fix available5.5 Medium
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreAn out-of-bounds read in the vrend_blit_need_swizzle function in vrend_renderer.c in...CVE-2019-18390Fix available7.1 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +1 more +3 moreA heap-based buffer overflow in the vrend_renderer_transfer_write_iov function in vrend_renderer...CVE-2019-18389Fix available7.8 High
- virglrenderer project virglrenderer, debian linux, opensuse leap +2 moreA NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.0 allows guest OS...CVE-2019-18388Fix available5.5 Medium
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c.CVE-2019-199177.8 High
- lout project lout, fedoraproject fedora, opensuse backports sle +1 more +3 moreLout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c.CVE-2019-199187.8 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- opensuse factory, suse linux enterprise server 15 sp1, trousers +1 more +3 moretrousers: Local privilege escalation from tss to rootCVE-2019-18898Fix available7.7 High
- rack, fedoraproject fedora, opensuse leap +2 morePossible Information Leak / Session Hijack Vulnerability in RackCVE-2019-16782Fix available6.3 Medium
- sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 High
- excon, debian linux, opensuse backports sle +1 more +3 moreIn RubyGem excon, interrupted Persistent Connections May Leak Response DataCVE-2019-16779Fix available5.8 Medium
- debian duplicity, linux, opensuse +2 moreduplicity 0.6.24 has improper verification of SSL certificatesCVE-2014-3495Fix available7.5 High
- pen project pen, debian linux, opensuse +2 morePen 0.18.0 has Insecure Temporary File Creation vulnerabilitiesCVE-2014-2387Fix available4.4 Medium
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreArbitrary File Overwrite in npm CLICVE-2019-16777Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16776Fix available7.7 High
- cli, npmjs npm, fedoraproject fedora +4 more +6 moreUnauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16775Fix available7.7 High
- xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a...CVE-2019-19583Fix available7.5 High
- sencha connect, debian linux, opensuse +1 more +3 moremethodOverride Middleware Reflected Cross-Site Scripting in connectCVE-2013-7370Fix available6.1 Medium
- cacti, debian linux, opensuse leap +2 moreCacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization...CVE-2019-17358Fix available8.1 High
- git-scm git, debian linux, fedoraproject fedora +1 more +3 moreArbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before...CVE-2019-19604Fix available7.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13764Public exploitFix available8.8 High
- google chrome, debian linux, fedoraproject fedora +5 more +7 moreInsufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote...CVE-2019-13745Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +12 more +14 moreOut of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13734Fix available8.8 High
- google chrome, debian linux, fedoraproject fedora +6 more +8 moreType confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to...CVE-2019-13730Fix available8.8 High
- microsoft visual studio 2017, visual studio 2017 version 15.9 (includes 15.1 - 15.8), visual studio 2019 +2 more +4 moreA tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive...CVE-2019-1351Public exploitFix available7.5 High
- libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 High
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14870Fix available5.4 Medium
- red hat samba, canonical ubuntu linux, debian linux +2 more +4 moreAll Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an...CVE-2019-14861Fix available5.3 Medium
- git-for-windows git, opensuse leap +1 moreCVE-2019-1353 does not affect BellSoft softwareCVE-2019-1353Fix available9.8 Critical
- git-for-windows git, opensuse leap +1 moreCVE-2019-1348 does not affect BellSoft softwareCVE-2019-1348Fix available3.3 Low
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen running, the updater service wrote status and log files to an unrestricted location;...CVE-2019-17009Fix available7.8 High
- openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 Medium
- red hat ansible, debian linux, opensuse backports sle +5 more +7 moreInclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in AnsibleCVE-2019-14864Fix available5.7 Medium
- opensuse factory, munge, suse linux enterprise server 15 +2 moreLocal privilege escalation from user munge to rootCVE-2019-3691Fix available7.7 High
- suse permissions, opensuse leap +1 morechkstat follows untrusted symbolic linksCVE-2019-3690Fix available6.8 Medium
- wireshark, debian linux, opensuse leap +2 more +4 moreIn Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. This was...CVE-2019-19553Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreMozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some...CVE-2019-17012Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when retrieving a document from a DocShell in the antitracking code, a...CVE-2019-17011Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreUnder certain conditions, when checking the Resist Fingerprinting preference during device...CVE-2019-17010Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen using nested workers, a use-after-free could occur during worker destruction. This resulted...CVE-2019-17008Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe plain text serializer used a fixed-size array for the number of <ol> elements it could...CVE-2019-17005Fix available8.8 High
- Show moreLoading…