LE
Product
Leap
by Opensuse · last CVE Apr 22, 2026
On CISA KEVExploited in the wildRansomware-linked
1,893
CVEs
19
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 193High 302Medium 5Low 0
Watch

Add Leap to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-2126
8.8
6%
Aug 20
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer
Affected: 15.1
CVE-2019-5060
8.8
4%
Jul 31
An exploitable code execution vulnerability exists in the XPM image rendering function of SDL2_image 2.0.4
Affected: 15.0; 15.1
CVE-2019-5059
8.8
4%
Jul 31
An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4
Affected: 15.0; 15.1
CVE-2019-5058
8.8
4%
Jul 31
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4
Affected: 15.0; 15.1
CVE-2019-5057
8.8
4%
Jul 31
An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4
Affected: 15.0; 15.1
CVE-2019-2859
8.8
0%
Jul 23
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)
Affected: 15.0; 15.1
CVE-2019-13308
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage
Affected: 15.0; 15.1
CVE-2019-13303
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage
Affected: 15.0; 15.1
CVE-2019-13302
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages
Affected: 15.0; 15.1
CVE-2019-13300
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns
Affected: 15.0; 15.1
CVE-2019-13299
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel
Affected: 15.0; 15.1
CVE-2019-13298
8.8
2%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error
Affected: 15.0; 15.1
CVE-2019-13297
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled
Affected: 15.0; 15.1
CVE-2019-13295
8.8
3%
Jul 5
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled
Affected: 15.0; 15.1
CVE-2019-5052
8.8
5%
Jul 3
An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4
Affected: 15.0; 15.1
CVE-2019-5051
8.8
4%
Jul 3
An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4
Affected: 15.0; 15.1
CVE-2019-5836
8.8
1%
Jun 27
Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5831
8.8
2%
Jun 27
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5829
8.8
1%
Jun 27
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5828
8.8
1%
Jun 27
Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5827
8.8
2%
Jun 27
Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5824
8.8
1%
Jun 27
Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5822
8.8
2%
Jun 27
Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5821
8.8
1%
Jun 27
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 15.0; 15.1; 42.3
CVE-2019-5820
8.8
1%
Jun 27
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 15.0; 15.1; 42.3
CVE-2019-5817
8.8
2%
Jun 27
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5816
8.8
2%
Jun 27
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5813
8.8
1%
Jun 27
Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5811
8.8
1%
Jun 27
Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5809
8.8
2%
Jun 27
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a…
Affected: 15.0; 15.1; 42.3
CVE-2019-5808
8.8
2%
Jun 27
Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5807
8.8
1%
Jun 27
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5806
8.8
1%
Jun 27
Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-10164
8.8
4%
Jun 26
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow
Affected: 15.0; 15.1
CVE-2019-8324
8.8
3%
Jun 17
An issue was discovered in RubyGems 2.6 and later through 3.0.2
Affected: 15.0; 15.1
CVE-2019-3846
8.8
6%
Jun 3
A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network
Affected: 15.0; 15.1; 42.3
CVE-2019-5795
8.8
1%
May 23
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file
Affected: 15.0; 15.1; 42.3
CVE-2019-5792
8.8
1%
May 23
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file
Affected: 15.0; 15.1; 42.3
CVE-2019-5791
8.8
2%
May 23
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-5790
8.8
2%
May 23
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a…
Affected: 15.0; 15.1; 42.3
CVE-2019-5789
8.8
9%
May 23
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process…
Affected: 15.0; 15.1; 42.3
CVE-2019-5788
8.8
9%
May 23
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer…
Affected: 15.0; 15.1; 42.3
CVE-2019-5787
8.8
2%
May 23
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.1; 42.3
CVE-2019-11328
8.8
2%
May 14
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g
Affected: 15.1
CVE-2019-11506
8.8
3%
Apr 24
In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker…
Affected: 15.0; 15.1; 42.3
CVE-2019-11505
8.8
3%
Apr 24
In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to…
Affected: 15.0; 15.1; 42.3
CVE-2019-11008
8.8
4%
Apr 8
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of…
Affected: 15.0; 42.3
CVE-2018-12180
8.8
2%
Mar 27
Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via…
Affected: 15.0
CVE-2019-3856
8.8
6%
Mar 25
An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed
Affected: 15.0; 42.3
CVE-2019-3857
8.8
6%
Mar 25
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are…
Affected: 15.0; 42.3
Page 3 of 7 · 302 total
The 500 most important CVEs for this product (exploited first, then by severity)