CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 10:10 UTC)

What this means for you

This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,470; Show in the list
Critical, last 7 days: 357; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product opensuse:leap. Show all products

123 CVEs, showing 51 to 100PreviousPage 2 of 3Next

CVE	Severity	Title	Published
CVE-2019-1010180	High 7.8	GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access. Assigned by dwf	Jul 24, 2019
CVE-2019-13057	Medium 4.9	An issue was discovered in the server in OpenLDAP before 2.4.48. Assigned by mitre	Jul 26, 2019
CVE-2019-13565	High 7.5	An issue was discovered in OpenLDAP 2.x before 2.4.48. Assigned by mitre	Jul 26, 2019
CVE-2019-5459	High 7.1	An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read. Assigned by hackerone	Jul 30, 2019
CVE-2019-5460	Medium 5.5	Double Free in VLC versions <= 3.0.6 leads to a crash. Assigned by hackerone	Jul 30, 2019
CVE-2019-15219	Medium 4.6	An issue was discovered in the Linux kernel before 5.1.8. Assigned by mitre	Aug 19, 2019
CVE-2019-15218	Medium 4.6	An issue was discovered in the Linux kernel before 5.1.8. Assigned by mitre	Aug 19, 2019
CVE-2019-15217	Medium 4.6	An issue was discovered in the Linux kernel before 5.2.3. Assigned by mitre	Aug 19, 2019
CVE-2019-10086 Healthcare	High 7.3	In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja… Assigned by apache	Aug 20, 2019
CVE-2019-15847	High 7.5	The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number… Assigned by mitre	Sep 2, 2019
CVE-2019-16056	Medium 5.3	An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. Assigned by mitre	Sep 6, 2019
CVE-2019-5481	Critical 9.8	Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3. Assigned by hackerone	Sep 16, 2019
CVE-2019-5482	Critical 9.8	Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. Assigned by hackerone	Sep 16, 2019
CVE-2019-13627	Medium 6.3	It was discovered that there was a ECDSA timing attack in the libgcrypt20 cryptographic library. Assigned by mitre	Sep 25, 2019
CVE-2019-17595	Medium 5.4	There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. Assigned by mitre	Oct 14, 2019
CVE-2019-17594	Medium 5.3	There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses before 6.1-20191012. Assigned by mitre	Oct 14, 2019
CVE-2019-17498	High 8.1	In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a s… Assigned by mitre	Oct 21, 2019
CVE-2019-5010	High 7.5	An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.	Oct 31, 2019
CVE-2019-19054	Medium 4.7	A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by tri… Assigned by mitre	Nov 18, 2019
CVE-2019-19066	Medium 4.7	A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering b… Assigned by mitre	Nov 18, 2019
CVE-2019-19080	Medium 5.9	Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memor… Assigned by mitre	Nov 18, 2019
CVE-2019-19081	Medium 5.9	A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory… Assigned by mitre	Nov 18, 2019
CVE-2019-19082	Medium 4.7	Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-19083	Medium 4.7	Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). Assigned by mitre	Nov 18, 2019
CVE-2019-13720 Known exploited	High 8.8	Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome	Nov 25, 2019
CVE-2019-19462	Medium 5.5	relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result. Assigned by mitre	Nov 30, 2019
CVE-2019-19530	Medium 4.6	In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef. Assigned by mitre	Dec 3, 2019
CVE-2019-1551	Medium 5.3	rsaz_512_sqr overflow bug on x86_64 Assigned by openssl	Dec 6, 2019
CVE-2019-19880	High 7.5	exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. Assigned by mitre	Dec 18, 2019
CVE-2019-19926	High 7.5	multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. Assigned by mitre	Dec 23, 2019
CVE-2019-17563	High 7.5	When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. Assigned by apache	Dec 23, 2019
CVE-2019-12418	High 7.0	When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration f… Assigned by apache	Dec 23, 2019
CVE-2019-19923	High 7.5	flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. Assigned by mitre	Dec 24, 2019
CVE-2019-19925	High 7.5	zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. Assigned by mitre	Dec 24, 2019
CVE-2019-19965	Medium 4.7	In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race… Assigned by mitre	Dec 25, 2019
CVE-2019-20095	Medium 5.5	mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. Assigned by mitre	Dec 30, 2019
CVE-2019-5188	High 7.5	A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. Assigned by talos	Jan 8, 2020
CVE-2019-20367	Critical 9.1	nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab). Assigned by mitre	Jan 8, 2020
CVE-2019-20388	High 7.5	xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak. Assigned by mitre	Jan 21, 2020
CVE-2020-8492	Medium 6.5	Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks agains… Assigned by mitre	Jan 30, 2020
CVE-2020-1935	Medium 4.8	In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as va… Assigned by apache	Feb 24, 2020
CVE-2020-1938 Known exploited	Critical 9.8	When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Assigned by apache	Feb 24, 2020
CVE-2020-10029	Medium 5.5	The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen… Assigned by mitre	Mar 4, 2020
CVE-2020-7598	Medium 5.6	minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. Assigned by snyk	Mar 11, 2020
CVE-2020-10531	High 8.8	An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. Assigned by mitre	Mar 12, 2020
CVE-2020-11494	Medium 4.4	An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. Assigned by mitre	Apr 2, 2020
CVE-2020-11501	High 7.4	GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. Assigned by mitre	Apr 3, 2020
CVE-2020-1967	High 7.5	Segmentation fault in SSL_check_chain Assigned by openssl	Apr 21, 2020
CVE-2020-12243	High 7.5	In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash). Assigned by mitre	Apr 28, 2020
CVE-2020-11022 Healthcare	Medium 6.9	jQuery has a potential XSS vulnerability Assigned by GitHub_M	Apr 29, 2020

PreviousPage 2 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.