[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$futFAkDIE2cX-8GP2Q2MOaB5rFv6MDTjbu95F13NjTG0":3,"g5a-family:opensuse\u002Fleap":276,"g5a-ex:opensuse\u002Fleap@*":279},{"success":4,"data":5},true,{"product":6,"versions":51,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":124,"seoMetadata":254,"meta":273},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":50},"opensuse","leap",11,1919,18,"2025-06-30",[14,18,22,26,31,33,36,38,40,44,47],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"15.0",509,2,{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},"15.1",1169,8,{"version":23,"cve_count":24,"kev_count":25,"has_kev":4},"15.2",383,3,{"version":27,"cve_count":28,"kev_count":29,"has_kev":30},"15.3",4,0,false,{"version":32,"cve_count":28,"kev_count":29,"has_kev":30},"15.4",{"version":34,"cve_count":35,"kev_count":29,"has_kev":30},"15.5",1,{"version":37,"cve_count":35,"kev_count":35,"has_kev":4},"15.6",{"version":39,"cve_count":29,"kev_count":29,"has_kev":30},"42.0",{"version":41,"cve_count":42,"kev_count":43,"has_kev":4},"42.1",400,7,{"version":45,"cve_count":46,"kev_count":29,"has_kev":30},"42.2",88,{"version":48,"cve_count":49,"kev_count":35,"has_kev":4},"42.3",208,"Leap by Opensuse is a technology product with 11 tracked versions and 1919 known security vulnerabilities including 18 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[52,53,54,55,56,57,58,59,60,61,62],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},{"version":23,"cve_count":24,"kev_count":25,"has_kev":4},{"version":27,"cve_count":28,"kev_count":29,"has_kev":30},{"version":32,"cve_count":28,"kev_count":29,"has_kev":30},{"version":34,"cve_count":35,"kev_count":29,"has_kev":30},{"version":37,"cve_count":35,"kev_count":35,"has_kev":4},{"version":39,"cve_count":29,"kev_count":29,"has_kev":30},{"version":41,"cve_count":42,"kev_count":43,"has_kev":4},{"version":45,"cve_count":46,"kev_count":29,"has_kev":30},{"version":48,"cve_count":49,"kev_count":35,"has_kev":4},[64,72,80,86,92,99,104,109,115,120],{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":30,"epssScore":71},"CVE-2014-0195","The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.","2014-06-05",6.8,"v2","Medium",0.99977,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":4,"epssScore":79},"CVE-2016-3714","The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to execute arbitrary code via shell metacharacters in a crafted image, aka \"ImageTragick.\"","2016-05-05",8.4,"v3.1","High",0.97485,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":77,"severity":78,"isKev":4,"epssScore":85},"CVE-2016-0752","Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.","2016-02-16",7.5,0.95537,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":77,"severity":70,"isKev":30,"epssScore":91},"CVE-2017-5753","Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","2018-01-04",5.6,0.93838,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":77,"severity":97,"isKev":4,"epssScore":98},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",9.8,"Critical",0.92334,{"cveId":100,"description":101,"publishedDate":75,"cvssScore":102,"cvssVersion":77,"severity":70,"isKev":30,"epssScore":103},"CVE-2016-2107","The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.",5.9,0.89058,{"cveId":105,"description":106,"publishedDate":67,"cvssScore":107,"cvssVersion":69,"severity":70,"isKev":30,"epssScore":108},"CVE-2014-0221","The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.",4.3,0.87892,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":77,"severity":70,"isKev":30,"epssScore":114},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":96,"cvssVersion":77,"severity":97,"isKev":30,"epssScore":119},"CVE-2017-14491","Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.","2017-10-04",0.86491,{"cveId":121,"description":122,"publishedDate":67,"cvssScore":107,"cvssVersion":69,"severity":70,"isKev":30,"epssScore":123},"CVE-2014-3470","The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.",0.85784,[125,134,142,147,156,160,169,177,181,189,197,206,213,220,227,234,242,248],{"cveId":126,"description":127,"publishedDate":12,"cvssScore":128,"severity":97,"isKev":4,"epssScore":129,"cisaVulnName":130,"cisaDateAdded":131,"cisaShortDescription":132,"cisaRequiredAction":133},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":135,"description":136,"publishedDate":137,"cvssScore":84,"severity":78,"isKev":4,"epssScore":138,"cisaVulnName":139,"cisaDateAdded":140,"cisaShortDescription":141,"cisaRequiredAction":133},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"severity":78,"isKev":4,"epssScore":79,"cisaVulnName":143,"cisaDateAdded":144,"cisaShortDescription":145,"cisaRequiredAction":146},"ImageMagick Improper Input Validation Vulnerability","2024-09-09","ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":148,"description":149,"publishedDate":150,"cvssScore":96,"severity":97,"isKev":4,"epssScore":151,"cisaVulnName":152,"cisaDateAdded":153,"cisaShortDescription":154,"cisaRequiredAction":155},"CVE-2020-12641","rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","2020-05-04",0.84456,"Roundcube Webmail Remote Code Execution Vulnerability","2023-06-22","Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","Apply updates per vendor instructions.",{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"severity":97,"isKev":4,"epssScore":98,"cisaVulnName":157,"cisaDateAdded":158,"cisaShortDescription":159,"cisaRequiredAction":155},"Oracle Java SE and JRockit Unspecified Vulnerability","2023-05-12","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"severity":78,"isKev":4,"epssScore":165,"cisaVulnName":166,"cisaDateAdded":167,"cisaShortDescription":168,"cisaRequiredAction":155},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",8.8,0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":170,"description":171,"publishedDate":172,"cvssScore":164,"severity":78,"isKev":4,"epssScore":173,"cisaVulnName":174,"cisaDateAdded":175,"cisaShortDescription":176,"cisaRequiredAction":155},"CVE-2019-13720","Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2019-11-25",0.49421,"Google Chrome WebAudio Use-After-Free Vulnerability","2022-05-23","Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.",{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"severity":78,"isKev":4,"epssScore":85,"cisaVulnName":178,"cisaDateAdded":179,"cisaShortDescription":180,"cisaRequiredAction":155},"Ruby on Rails Directory Traversal Vulnerability","2022-03-25","Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.",{"cveId":182,"description":183,"publishedDate":184,"cvssScore":96,"severity":97,"isKev":4,"epssScore":185,"cisaVulnName":186,"cisaDateAdded":187,"cisaShortDescription":188,"cisaRequiredAction":155},"CVE-2020-1938","When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited in ways that may be surprising. In Apache Tomcat 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99, Tomcat shipped with an AJP Connector enabled by default that listened on all configured IP addresses. It was expected (and recommended in the security guide) that this Connector would be disabled if not required. This vulnerability report identified a mechanism that allowed: - returning arbitrary files from anywhere in the web application - processing any file in the web application as a JSP Further, if the web application allowed file upload and stored those files within the web application (or the attacker was able to control the content of the web application by some other means) then this, along with the ability to process a file as a JSP, made remote code execution possible. It is important to note that mitigation is only required if an AJP port is accessible to untrusted users. Users wishing to take a defence-in-depth approach and block the vector that permits returning arbitrary files and execution as JSP may upgrade to Apache Tomcat 9.0.31, 8.5.51 or 7.0.100 or later. A number of changes were made to the default AJP Connector configuration in 9.0.31 to harden the default configuration. It is likely that users upgrading to 9.0.31, 8.5.51 or 7.0.100 or later will need to make small changes to their configurations.","2020-02-24",0.9927,"Apache Tomcat Improper Privilege Management Vulnerability","2022-03-03","Apache Tomcat treats Apache JServ Protocol (AJP) connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exploited.",{"cveId":190,"description":191,"publishedDate":192,"cvssScore":193,"severity":70,"isKev":4,"epssScore":194,"cisaVulnName":195,"cisaDateAdded":187,"cisaShortDescription":196,"cisaRequiredAction":155},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,0.13603,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":198,"description":199,"publishedDate":200,"cvssScore":201,"severity":70,"isKev":4,"epssScore":202,"cisaVulnName":203,"cisaDateAdded":204,"cisaShortDescription":205,"cisaRequiredAction":155},"CVE-2020-11652","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.","2020-04-30",6.5,0.86178,"SaltStack Salt Path Traversal Vulnerability","2021-11-03","SaltStack Salt contains a path traversal vulnerability in the salt-master process ClearFuncs which allows directory access to authenticated users. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"cveId":207,"description":208,"publishedDate":75,"cvssScore":209,"severity":70,"isKev":4,"epssScore":210,"cisaVulnName":211,"cisaDateAdded":204,"cisaShortDescription":212,"cisaRequiredAction":155},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",5.5,0.7565,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":214,"description":215,"publishedDate":216,"cvssScore":209,"severity":70,"isKev":4,"epssScore":217,"cisaVulnName":218,"cisaDateAdded":204,"cisaShortDescription":219,"cisaRequiredAction":155},"CVE-2020-1472","An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network.\nTo exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.\nMicrosoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels.\nFor guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see  How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020).\nWhen the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.\n","2020-08-17",0.99389,"Microsoft Netlogon Privilege Escalation Vulnerability","Microsoft's Netlogon Remote Protocol (MS-NRPC) contains a privilege escalation vulnerability when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller. An attacker who successfully exploits the vulnerability could run a specially crafted application on a device on the network. The vulnerability is also known under the moniker of Zerologon.",{"cveId":221,"description":222,"publishedDate":223,"cvssScore":164,"severity":78,"isKev":4,"epssScore":224,"cisaVulnName":225,"cisaDateAdded":204,"cisaShortDescription":226,"cisaRequiredAction":155},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",0.48293,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":228,"description":229,"publishedDate":230,"cvssScore":96,"severity":97,"isKev":4,"epssScore":231,"cisaVulnName":232,"cisaDateAdded":204,"cisaShortDescription":233,"cisaRequiredAction":155},"CVE-2020-16846","An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.","2020-11-06",0.99585,"SaltStack Salt Shell Injection Vulnerability","SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API using the SSH client. This vulnerability affects any users running the Salt API.",{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"severity":78,"isKev":4,"epssScore":239,"cisaVulnName":240,"cisaDateAdded":204,"cisaShortDescription":241,"cisaRequiredAction":155},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":243,"description":244,"publishedDate":75,"cvssScore":209,"severity":70,"isKev":4,"epssScore":245,"cisaVulnName":246,"cisaDateAdded":204,"cisaShortDescription":247,"cisaRequiredAction":155},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":249,"description":250,"publishedDate":200,"cvssScore":96,"severity":97,"isKev":4,"epssScore":251,"cisaVulnName":252,"cisaDateAdded":204,"cisaShortDescription":253,"cisaRequiredAction":155},"CVE-2020-11651","An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be used to retrieve user tokens from the salt master and\u002For run arbitrary commands on salt minions.",0.96614,"SaltStack Salt Authentication Bypass Vulnerability","SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and\u002For run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.",{"title":255,"metaDescription":256,"keywords":257,"structuredData":258},"Leap by Opensuse - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Leap by Opensuse covering 11 versions with 1919 tracked vulnerabilities including 6 critical and 7 high-severity issues and 18 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Leap vulnerabilities, Leap security, Leap CVE, Opensuse Leap, Leap threat intelligence, Opensuse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Leap KEV, Leap exploited vulnerabilities",{"@context":259,"@type":260,"name":261,"description":256,"url":262,"manufacturer":263,"applicationCategory":267,"softwareVersion":268,"mainEntity":269},"https:\u002F\u002Fschema.org","SoftwareApplication","Leap","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopensuse\u002Fleap",{"@type":264,"name":265,"url":266},"Organization","Opensuse","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fopensuse","Security Software","11 versions tracked",{"@type":270,"name":271,"description":272,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Leap Security Vulnerabilities","Security vulnerabilities affecting Leap by Opensuse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":274,"apiVersion":275},"2026-10-28T16:13:34.673Z","3.0",[277],{"product":278,"cves":35},"leap_micro",{"rows":280,"total":11,"capped":30,"failed":29},[281,285,289,293,297,301,305,309,313,317,321,325,329,333,337,341,345,349],{"cveId":126,"name":130,"severity":97,"cvss":128,"added":131,"epss":129,"published":282,"ranges":283,"checked":4,"hits":284,"covers":30},"2025-06-30T21:15:30.257",[37],[],{"cveId":135,"name":139,"severity":78,"cvss":84,"added":140,"epss":138,"published":286,"ranges":287,"checked":4,"hits":288,"covers":30},"2019-03-27T14:29:01.533",[15],[],{"cveId":73,"name":143,"severity":78,"cvss":76,"added":144,"epss":79,"published":290,"ranges":291,"checked":4,"hits":292,"covers":30},"2016-05-05T18:59:03.273",[41],[],{"cveId":148,"name":152,"severity":97,"cvss":96,"added":153,"epss":151,"published":294,"ranges":295,"checked":4,"hits":296,"covers":30},"2020-05-04T15:15:14.417",[19,23],[],{"cveId":93,"name":157,"severity":97,"cvss":96,"added":158,"epss":98,"published":298,"ranges":299,"checked":4,"hits":300,"covers":30},"2016-04-21T11:00:21.667",[41],[],{"cveId":161,"name":166,"severity":78,"cvss":164,"added":167,"epss":165,"published":302,"ranges":303,"checked":4,"hits":304,"covers":30},"2016-03-29T10:59:00.16",[41],[],{"cveId":170,"name":174,"severity":78,"cvss":164,"added":175,"epss":173,"published":306,"ranges":307,"checked":4,"hits":308,"covers":30},"2019-11-25T15:15:33.887",[19],[],{"cveId":81,"name":178,"severity":78,"cvss":84,"added":179,"epss":85,"published":310,"ranges":311,"checked":4,"hits":312,"covers":30},"2016-02-16T02:59:06.783",[41],[],{"cveId":182,"name":186,"severity":97,"cvss":96,"added":187,"epss":185,"published":314,"ranges":315,"checked":4,"hits":316,"covers":30},"2020-02-24T22:15:12.057",[19],[],{"cveId":190,"name":195,"severity":70,"cvss":193,"added":187,"epss":194,"published":318,"ranges":319,"checked":4,"hits":320,"covers":30},"2015-10-22T00:00:03.093",[41],[],{"cveId":198,"name":203,"severity":70,"cvss":201,"added":204,"epss":202,"published":322,"ranges":323,"checked":4,"hits":324,"covers":30},"2020-04-30T17:15:12.19",[19],[],{"cveId":207,"name":211,"severity":70,"cvss":209,"added":204,"epss":210,"published":326,"ranges":327,"checked":4,"hits":328,"covers":30},"2016-05-05T18:59:08.96",[41],[],{"cveId":214,"name":218,"severity":70,"cvss":209,"added":204,"epss":217,"published":330,"ranges":331,"checked":4,"hits":332,"covers":30},"2020-08-17T19:15:15.117",[19,23],[],{"cveId":221,"name":225,"severity":78,"cvss":164,"added":204,"epss":224,"published":334,"ranges":335,"checked":4,"hits":336,"covers":30},"2020-11-03T03:15:15.527",[19,23],[],{"cveId":228,"name":232,"severity":97,"cvss":96,"added":204,"epss":231,"published":338,"ranges":339,"checked":4,"hits":340,"covers":30},"2020-11-06T08:15:13.283",[19],[],{"cveId":235,"name":240,"severity":78,"cvss":238,"added":204,"epss":239,"published":342,"ranges":343,"checked":4,"hits":344,"covers":30},"2019-04-08T22:29:00.387",[15,48],[],{"cveId":243,"name":246,"severity":70,"cvss":209,"added":204,"epss":245,"published":346,"ranges":347,"checked":4,"hits":348,"covers":30},"2016-05-05T18:59:04.727",[41],[],{"cveId":249,"name":252,"severity":97,"cvss":96,"added":204,"epss":251,"published":350,"ranges":351,"checked":4,"hits":352,"covers":30},"2020-04-30T17:15:12.143",[19],[]]