Vulnerabilities > Opensuse > Leap

DATE CVE VULNERABILITY TITLE RISK
2019-09-05 CVE-2019-15939 Divide By Zero vulnerability in multiple products
An issue was discovered in OpenCV 4.1.0.
network
high complexity
opencv opensuse debian CWE-369
5.9
2019-09-04 CVE-2017-18595 Double Free vulnerability in multiple products
An issue was discovered in the Linux kernel before 4.14.11.
local
low complexity
linux opensuse CWE-415
7.8
2019-09-04 CVE-2019-15921 Memory Leak vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.0.6.
local
high complexity
linux opensuse CWE-401
4.7
2019-09-04 CVE-2019-15920 Use After Free vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.0.10.
network
low complexity
linux opensuse CWE-416
4.3
2019-09-04 CVE-2019-15919 Use After Free vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.0.10.
local
low complexity
linux opensuse CWE-416
3.3
2019-09-04 CVE-2019-15917 Use After Free vulnerability in multiple products
An issue was discovered in the Linux kernel before 5.0.5.
local
high complexity
linux debian opensuse CWE-416
7.0
2019-09-04 CVE-2019-15902 Information Exposure vulnerability in multiple products
A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11.
local
high complexity
linux debian opensuse netapp CWE-200
5.6
2019-09-03 CVE-2019-14817 Incorrect Authorization vulnerability in multiple products
A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.
7.8
2019-09-03 CVE-2019-14811 Incorrect Authorization vulnerability in multiple products
A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.
7.8
2019-09-02 CVE-2019-15847 Insufficient Entropy vulnerability in multiple products
The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing the entropy of the random number generator.
network
low complexity
gnu opensuse CWE-331
7.5