LE
Product
Leap
On CISA KEVExploited in the wildRansomware-linked
1,893
CVEs
19
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 193High 302Medium 5Low 0
Watch
Add Leap to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-5059 | 8.8 | Jul 31 | An exploitable code execution vulnerability exists in the XPM image rendering functionality of SDL2_image 2.0.4 Affected: 15.0; 15.1 |
| CVE-2019-5058 | 8.8 | Jul 31 | An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image 2.0.4 Affected: 15.0; 15.1 |
| CVE-2019-5057 | 8.8 | Jul 31 | An exploitable code execution vulnerability exists in the PCX image-rendering functionality of SDL2_image 2.0.4 Affected: 15.0; 15.1 |
| CVE-2019-2859 | 8.8 | Jul 23 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) Affected: 15.0; 15.1 |
| CVE-2019-13308 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage Affected: 15.0; 15.1 |
| CVE-2019-13303 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage Affected: 15.0; 15.1 |
| CVE-2019-13302 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages Affected: 15.0; 15.1 |
| CVE-2019-13300 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns Affected: 15.0; 15.1 |
| CVE-2019-13299 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel Affected: 15.0; 15.1 |
| CVE-2019-13298 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error Affected: 15.0; 15.1 |
| CVE-2019-13297 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled Affected: 15.0; 15.1 |
| CVE-2019-13295 | 8.8 | Jul 5 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled Affected: 15.0; 15.1 |
| CVE-2019-5052 | 8.8 | Jul 3 | An exploitable integer overflow vulnerability exists when loading a PCX file in SDL2_image 2.0.4 Affected: 15.0; 15.1 |
| CVE-2019-5051 | 8.8 | Jul 3 | An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4 Affected: 15.0; 15.1 |
| CVE-2019-5836 | 8.8 | Jun 27 | Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5831 | 8.8 | Jun 27 | Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5829 | 8.8 | Jun 27 | Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5828 | 8.8 | Jun 27 | Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5827 | 8.8 | Jun 27 | Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5824 | 8.8 | Jun 27 | Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5822 | 8.8 | Jun 27 | Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5821 | 8.8 | Jun 27 | Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5820 | 8.8 | Jun 27 | Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5817 | 8.8 | Jun 27 | Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5816 | 8.8 | Jun 27 | Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5813 | 8.8 | Jun 27 | Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5811 | 8.8 | Jun 27 | Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5809 | 8.8 | Jun 27 | Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5808 | 8.8 | Jun 27 | Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5807 | 8.8 | Jun 27 | Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5806 | 8.8 | Jun 27 | Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-10164 | 8.8 | Jun 26 | PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4 are vulnerable to a stack-based buffer overflow Affected: 15.0; 15.1 |
| CVE-2019-8324 | 8.8 | Jun 17 | An issue was discovered in RubyGems 2.6 and later through 3.0.2 Affected: 15.0; 15.1 |
| CVE-2019-3846 | 8.8 | Jun 3 | A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5795 | 8.8 | May 23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5792 | 8.8 | May 23 | Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5791 | 8.8 | May 23 | Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5790 | 8.8 | May 23 | An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5789 | 8.8 | May 23 | An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5788 | 8.8 | May 23 | An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-5787 | 8.8 | May 23 | Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0; 15.1; 42.3 |
| CVE-2019-11328 | 8.8 | May 14 | An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g Affected: 15.1 |
| CVE-2019-11506 | 8.8 | Apr 24 | In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-11505 | 8.8 | Apr 24 | In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to… Affected: 15.0; 15.1; 42.3 |
| CVE-2019-11008 | 8.8 | Apr 8 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allows remote attackers to cause a denial of… Affected: 15.0; 42.3 |
| CVE-2018-12180 | 8.8 | Mar 27 | Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via… Affected: 15.0 |
| CVE-2019-3856 | 8.8 | Mar 25 | An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed Affected: 15.0; 42.3 |
| CVE-2019-3857 | 8.8 | Mar 25 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit signal are… Affected: 15.0; 42.3 |
| CVE-2019-3863 | 8.8 | Mar 25 | A flaw was found in libssh2 before 1.8.1 creating a vulnerability on the SSH client side Affected: 15.0; 42.3 |
| CVE-2019-3855 | 8.8 | Mar 21 | An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server Affected: 42.3 |
The 500 most important CVEs for this product (exploited first, then by severity)
