LE
Product
Leap
On CISA KEVExploited in the wildRansomware-linked
1,893
CVEs
19
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 193High 302Medium 5Low 0
Watch
Add Leap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6438 | 9.8 | Jan 31 | SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems Affected: 15.0 |
| CVE-2018-19873 | 9.8 | Dec 26 | An issue was discovered in Qt before 5.11.3 Affected: 15.1; 15.2; 42.3 |
| CVE-2018-1000802 | 9.8 | Sep 18 | Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in… Affected: 15.1; 15.1 |
| CVE-2018-16402 | 9.8 | Sep 3 | libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it… Affected: 15.0; 15.1 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 15.1 |
| CVE-2018-12910 | 9.8 | Jul 5 | The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname Affected: 15.0 |
| CVE-2017-18215 | 9.8 | Mar 5 | xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to crashes or potentially code execution, because it uses an incorrect… Affected: 42.3 |
| CVE-2017-18017 | 9.8 | Jan 3 | The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service… Affected: 42.3 |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 42.2; 42.3 |
| CVE-2017-14493 | 9.8 | Oct 3 | Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request Affected: 42.2; 42.3 |
| CVE-2016-9961 | 9.8 | Jun 6 | game-music-emu before 0.6.1 mishandles unspecified integer values Affected: 42.2 |
| CVE-2016-9843 | 9.8 | May 23 | The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation Affected: 42.1; 42.2 |
| CVE-2016-5178 | 9.8 | May 23 | Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 42.1 |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: 42.1; 42.2 |
| CVE-2017-6542 | 9.8 | Mar 27 | The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging… Affected: 42.2 |
| CVE-2017-5337 | 9.8 | Mar 24 | Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified impact via a crafted… Affected: 42.1; 42.2 |
| CVE-2017-5336 | 9.8 | Mar 24 | Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified… Affected: 42.1; 42.2 |
| CVE-2017-5334 | 9.8 | Mar 24 | Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have unspecified impact via… Affected: 42.1; 42.2 |
| CVE-2014-9846 | 9.8 | Mar 20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact Affected: 42.2 |
| CVE-2014-9852 | 9.8 | Mar 17 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors Affected: 42.1 |
| CVE-2016-7447 | 9.8 | Feb 6 | Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified impact via unknown vectors Affected: 42.1 |
| CVE-2016-7446 | 9.8 | Feb 6 | Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown vectors Affected: 42.1 |
| CVE-2016-9427 | 9.8 | Dec 12 | Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary… Affected: 42.1; 42.2 |
| CVE-2016-4303 | 9.8 | Sep 26 | The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code… Affected: 42.1 |
| CVE-2016-5772 | 9.8 | Aug 7 | Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote… Affected: 42.1 |
| CVE-2016-5771 | 9.8 | Aug 7 | spl_array.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote… Affected: 42.1 |
| CVE-2016-5770 | 9.8 | Aug 7 | Integer overflow in the SplFileObject::fread function in spl_directory.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 allows remote attackers to cause a… Affected: 42.1 |
| CVE-2016-5703 | 9.8 | Jul 3 | SQL injection vulnerability in libraries/central_columns.lib.php in phpMyAdmin 4.4.x before 4.4.15.7 and 4.6.x before 4.6.3 allows remote attackers to execute arbitrary SQL… Affected: 42.1 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: 42.1 |
| CVE-2016-0749 | 9.8 | Jun 9 | The smartcard interaction in SPICE allows remote attackers to cause a denial of service (QEMU-KVM process crash) or possibly execute arbitrary code via vectors related to… Affected: 42.1 |
| CVE-2016-0718 | 9.8 | May 26 | Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow Affected: 42.1 |
| CVE-2016-4544 | 9.8 | May 22 | The exif_process_TIFF_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate TIFF start data, which allows remote… Affected: 42.1 |
| CVE-2016-4543 | 9.8 | May 22 | The exif_process_IFD_in_JPEG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not validate IFD sizes, which allows remote attackers… Affected: 42.1 |
| CVE-2016-4542 | 9.8 | May 22 | The exif_process_IFD_TAG function in ext/exif/exif.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 does not properly construct spprintf arguments, which allows… Affected: 42.1 |
| CVE-2016-4541 | 9.8 | May 22 | The grapheme_strpos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of… Affected: 42.1 |
| CVE-2016-4540 | 9.8 | May 22 | The grapheme_stripos function in ext/intl/grapheme/grapheme_string.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of… Affected: 42.1 |
| CVE-2016-4539 | 9.8 | May 22 | The xml_parse_into_struct function in ext/xml/xml.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 allows remote attackers to cause a denial of service (buffer… Affected: 42.1 |
| CVE-2016-4538 | 9.8 | May 22 | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 modifies certain data structures without considering whether they are… Affected: 42.1 |
| CVE-2016-4537 | 9.8 | May 22 | The bcpowmod function in ext/bcmath/bcmath.c in PHP before 5.5.35, 5.6.x before 5.6.21, and 7.x before 7.0.6 accepts a negative integer for the scale argument, which allows remote… Affected: 42.1 |
| CVE-2016-4346 | 9.8 | May 22 | Integer overflow in the str_pad function in ext/standard/string.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other… Affected: 42.1 |
| CVE-2015-4116 | 9.8 | May 16 | Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary… Affected: 42.1 |
| CVE-2015-8863 | 9.8 | May 6 | Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (crash) via a long JSON-encoded number, which triggers a… Affected: 42.1 |
| CVE-2016-1659 | 9.8 | Apr 18 | Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors Affected: 42.1 |
| CVE-2016-4007 | 9.8 | Apr 13 | Multiple unspecified vulnerabilities in the obs-service-extract_file package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute… Affected: 42.1 |
| CVE-2016-2324 | 9.8 | Apr 8 | Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer… Affected: 42.1 |
| CVE-2016-2315 | 9.8 | Apr 8 | revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees,… Affected: 42.1 |
| CVE-2016-2851 | 9.8 | Apr 7 | Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute… Affected: 42.1 |
| CVE-2015-8805 | 9.8 | Feb 23 | The ecc_256_modq function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST… Affected: 42.1 |
| CVE-2015-8804 | 9.8 | Feb 23 | x86_64/ecc-384-modp.asm in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-384 NIST elliptic curve, which… Affected: 42.1 |
| CVE-2015-8803 | 9.8 | Feb 23 | The ecc_256_modp function in ecc-256.c in Nettle before 3.2 does not properly handle carry propagation and produces incorrect output in its implementation of the P-256 NIST… Affected: 42.1 |
The 500 most important CVEs for this product (exploited first, then by severity)