CVE-2019-12036

CVE-2019-12036 entry is rejected/not used per the description.

CVE-2019-5327

CVE-2019-5327 is rejected/not used per the description; this entry does not represent an active vulnerability.

CVE-2019-12037

CVE-2019-12037 is rejected/not used per the initial description.

CVE-2019-12035

CVE-2019-12035 is rejected/not used per the description; not an active vulnerability entry.

CVE-2019-12006

CVE-2019-12006 is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-12004

CVE-2019-12004 is rejected and not an active vulnerability entry.

CVE-2019-12016

This CVE entry is rejected and not used per the Initial Description.

CVE-2019-12015

CVE-2019-12015 is rejected/not used; this entry does not represent an active vulnerability.

PT-2020-9238

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

PT-2020-9261

Name of the Vulnerable Software and Affected Versions No information is available about the vulnerable software and its affected versions. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no...

PT-2020-9265

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

PT-2020-9241

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

PT-2020-9262

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

PT-2020-9247

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

PT-2020-9239

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...

OPENSUSE-SU-2020:0741-1 Security update for freetds

This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed: - Enabled Kerberos support - Version upda...

Security update for freetds (moderate)

openSUSE Security Update: Security update for freetds Announcement ID: openSUSE-SU-2020:0741-1 Rating: moderate References: 1141132 Cross-References: CVE-2019-13508 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for freetds ...

jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the commons-dbcp gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or...

USN-4371-1 libvirt vulnerabilities

It was discovered that libvirt incorrectly handled an active pool without a target path. A remote attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2020-10703 It was discovered that libvirt incorrectly handled memory when retrieving certain...

jackson-databind: Serialization gadgets in org.apache.commons.dbcp.datasources.*

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the commons-dbcp gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or...