[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-12155":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":87,"related":88,"reserved_at":9,"published_at":101,"modified_at":102,"state":103,"summary":104,"references_raw":112,"kevs":207,"epss":208,"epss_history":211,"metrics":476,"affected":486},"CVE-2019-12155","interface_release_resource in hw/display/qxl.c in QEMU 3.1.x through 4.0.0 has a NULL pointer dereference.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-476","NULL Pointer Dereference","The product dereferences a pointer that it expects to be valid but is NULL.","weakness","Stable","Base","Medium",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_326D5D97E340FDBB","Exploit Reference (openwall.com)","reference","http://www.openwall.com/lists/oss-security/2019/05/22/1","unknown",0.2,false,[],[],[],[33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85],{"_key":34},"SUSE-SU-2019:2157-1",{"_key":36},"RHBA-2019:3723",{"_key":38},"RHSA-2019:2607",{"_key":40},"RHSA-2019:3179",{"_key":42},"RHSA-2019:3345",{"_key":44},"RHSA-2019:3742",{"_key":46},"RHSA-2019:3787",{"_key":48},"RHSA-2019:4344",{"_key":50},"RHSA-2020:1216",{"_key":52},"OPENSUSE-SU-2024:11287-1",{"_key":54},"SUSE-SU-2019:14151-1",{"_key":56},"SUSE-SU-2019:14199-1",{"_key":58},"SUSE-SU-2019:14201-1",{"_key":60},"SUSE-SU-2019:2192-1",{"_key":62},"SUSE-SU-2019:2221-1",{"_key":64},"SUSE-SU-2019:2246-1",{"_key":66},"SUSE-SU-2019:2353-1",{"_key":68},"SUSE-SU-2020:0388-1",{"_key":70},"UBUNTU-CVE-2019-12155",{"_key":72},"OPENSUSE-SU-2019:2041-1",{"_key":74},"OPENSUSE-SU-2019:2059-1",{"_key":76},"RHSA-2019:2892",{"_key":78},"DLA-1927-1",{"_key":80},"DSA-4454-1",{"_key":82},"USN-4191-1",{"_key":84},"USN-4191-2",{"_key":86},"DEBIAN-CVE-2019-12155",[],[89,90,91,92,93,94,95,96,97,98,99,100],{"_key":34},{"_key":52},{"_key":54},{"_key":56},{"_key":58},{"_key":60},{"_key":62},{"_key":64},{"_key":66},{"_key":68},{"_key":72},{"_key":74},"2019-05-24T15:33:11.000Z","2024-08-04T23:10:30.831Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":105,"epss_score":106,"severity":107,"severity_score":108,"severity_version":109,"severity_source":110,"severity_vector":111,"severity_status":103},"low",0.01147,"high",7.5,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[113,122,127,133,138,143,147,152,156,161,166,170,174,178,182,186,191,195,199,203],{"url":114,"sources":115,"tags":117},"https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg01321.html",[116,110],"cve.org",[118,119,120,121],"X Refsource MISC","Mailing List","Patch","Third Party Advisory",{"url":25,"sources":123,"tags":124},[116,110],[125,126,119,121],"X Refsource CONFIRM","Exploit",{"url":128,"sources":129,"tags":130},"https://www.debian.org/security/2019/dsa-4454",[116,110],[131,132],"Vendor Advisory","X Refsource DEBIAN",{"url":134,"sources":135,"tags":136},"https://seclists.org/bugtraq/2019/May/76",[116,110],[119,137],"X Refsource BUGTRAQ",{"url":139,"sources":140,"tags":141},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RVDHJB2QKXNDU7OFXIHIL5O5VN5QCSZL/",[116,110],[131,142],"X Refsource FEDORA",{"url":144,"sources":145,"tags":146},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BOE3PVFPMWMXV3DGP2R3XIHAF2ZQU3FS/",[116,110],[131,142],{"url":148,"sources":149,"tags":150},"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00000.html",[116,110],[131,151],"X Refsource SUSE",{"url":153,"sources":154,"tags":155},"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00008.html",[116,110],[131,151],{"url":157,"sources":158,"tags":159},"https://access.redhat.com/errata/RHSA-2019:2607",[116,110],[131,160],"X Refsource REDHAT",{"url":162,"sources":163,"tags":164},"https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html",[116,110],[119,165],"X Refsource MLIST",{"url":167,"sources":168,"tags":169},"https://access.redhat.com/errata/RHSA-2019:2892",[116,110],[131,160],{"url":171,"sources":172,"tags":173},"https://access.redhat.com/errata/RHSA-2019:3179",[116,110],[131,160],{"url":175,"sources":176,"tags":177},"https://access.redhat.com/errata/RHSA-2019:3345",[116,110],[131,160],{"url":179,"sources":180,"tags":181},"https://access.redhat.com/errata/RHSA-2019:3742",[116,110],[131,160],{"url":183,"sources":184,"tags":185},"https://access.redhat.com/errata/RHSA-2019:3787",[116,110],[131,160],{"url":187,"sources":188,"tags":189},"https://usn.ubuntu.com/4191-2/",[116,110],[131,190],"X Refsource UBUNTU",{"url":192,"sources":193,"tags":194},"https://usn.ubuntu.com/4191-1/",[116,110],[131,190],{"url":196,"sources":197,"tags":198},"https://access.redhat.com/errata/RHBA-2019:3723",[116,110],[131,160],{"url":200,"sources":201,"tags":202},"https://access.redhat.com/errata/RHSA-2019:4344",[116,110],[131,160],{"url":204,"sources":205,"tags":206},"https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3be7eb2f47bf71db5f80fcf8750ea395dd5ffdd2",[116,110],[118],[],{"date":209,"score":106,"percentile":210},"2026-06-04",0.78805,[212,216,218,221,224,227,229,232,235,238,241,244,247,250,253,257,260,263,266,268,271,274,277,280,282,285,288,290,293,296,299,302,305,308,311,313,316,319,322,325,328,331,334,337,340,343,346,349,352,355,358,361,364,367,370,373,376,379,382,385,388,391,394,397,400,403,406,409,412,415,418,421,424,427,430,433,436,438,441,444,446,449,452,455,458,461,464,467,470,473],{"date":213,"score":214,"percentile":215},"2025-11-04",0.0117,0.77978,{"date":217,"score":214,"percentile":215},"2025-11-05",{"date":219,"score":214,"percentile":220},"2025-11-06",0.77974,{"date":222,"score":214,"percentile":223},"2025-11-07",0.7799,{"date":225,"score":214,"percentile":226},"2025-11-08",0.77995,{"date":228,"score":214,"percentile":223},"2025-11-09",{"date":230,"score":214,"percentile":231},"2025-11-10",0.77979,{"date":233,"score":214,"percentile":234},"2025-11-11",0.77981,{"date":236,"score":214,"percentile":237},"2025-11-12",0.77998,{"date":239,"score":214,"percentile":240},"2025-11-13",0.78008,{"date":242,"score":214,"percentile":243},"2025-11-14",0.78018,{"date":245,"score":214,"percentile":246},"2025-11-15",0.78015,{"date":248,"score":214,"percentile":249},"2025-11-16",0.78017,{"date":251,"score":214,"percentile":252},"2025-11-17",0.78011,{"date":254,"score":255,"percentile":256},"2025-11-18",0.02924,0.85154,{"date":258,"score":255,"percentile":259},"2025-11-19",0.85155,{"date":261,"score":255,"percentile":262},"2025-11-20",0.85157,{"date":264,"score":214,"percentile":265},"2025-11-21",0.78038,{"date":267,"score":214,"percentile":265},"2025-11-22",{"date":269,"score":214,"percentile":270},"2025-11-23",0.78026,{"date":272,"score":214,"percentile":273},"2025-11-24",0.78024,{"date":275,"score":214,"percentile":276},"2025-11-25",0.7803,{"date":278,"score":214,"percentile":279},"2025-11-26",0.78034,{"date":281,"score":214,"percentile":265},"2025-11-27",{"date":283,"score":214,"percentile":284},"2025-11-28",0.78029,{"date":286,"score":214,"percentile":287},"2025-11-29",0.78036,{"date":289,"score":214,"percentile":279},"2025-11-30",{"date":291,"score":214,"percentile":292},"2025-12-01",0.78136,{"date":294,"score":214,"percentile":295},"2025-12-02",0.78144,{"date":297,"score":214,"percentile":298},"2025-12-03",0.7814,{"date":300,"score":214,"percentile":301},"2025-12-04",0.78032,{"date":303,"score":214,"percentile":304},"2025-12-05",0.78039,{"date":306,"score":214,"percentile":307},"2025-12-06",0.78041,{"date":309,"score":214,"percentile":310},"2025-12-07",0.78035,{"date":312,"score":214,"percentile":304},"2025-12-08",{"date":314,"score":214,"percentile":315},"2025-12-09",0.78059,{"date":317,"score":214,"percentile":318},"2025-12-10",0.78083,{"date":320,"score":214,"percentile":321},"2025-12-11",0.78098,{"date":323,"score":214,"percentile":324},"2025-12-12",0.78116,{"date":326,"score":214,"percentile":327},"2025-12-13",0.78118,{"date":329,"score":214,"percentile":330},"2025-12-14",0.78115,{"date":332,"score":214,"percentile":333},"2025-12-15",0.78111,{"date":335,"score":214,"percentile":336},"2025-12-16",0.78123,{"date":338,"score":214,"percentile":339},"2025-12-17",0.78131,{"date":341,"score":214,"percentile":342},"2025-12-18",0.78147,{"date":344,"score":214,"percentile":345},"2025-12-19",0.78158,{"date":347,"score":214,"percentile":348},"2025-12-20",0.78151,{"date":350,"score":214,"percentile":351},"2025-12-21",0.78146,{"date":353,"score":214,"percentile":354},"2025-12-22",0.78149,{"date":356,"score":214,"percentile":357},"2025-12-23",0.7815,{"date":359,"score":214,"percentile":360},"2025-12-24",0.78163,{"date":362,"score":214,"percentile":363},"2025-12-25",0.78182,{"date":365,"score":214,"percentile":366},"2025-12-26",0.7818,{"date":368,"score":214,"percentile":369},"2025-12-27",0.7823,{"date":371,"score":214,"percentile":372},"2025-12-28",0.78169,{"date":374,"score":214,"percentile":375},"2025-12-29",0.78167,{"date":377,"score":214,"percentile":378},"2025-12-30",0.78172,{"date":380,"score":214,"percentile":381},"2025-12-31",0.78185,{"date":383,"score":214,"percentile":384},"2026-01-01",0.78299,{"date":386,"score":214,"percentile":387},"2026-01-02",0.783,{"date":389,"score":214,"percentile":390},"2026-01-03",0.78298,{"date":392,"score":214,"percentile":393},"2026-01-04",0.78187,{"date":395,"score":214,"percentile":396},"2026-01-05",0.78181,{"date":398,"score":214,"percentile":399},"2026-01-06",0.78191,{"date":401,"score":214,"percentile":402},"2026-01-07",0.78198,{"date":404,"score":214,"percentile":405},"2026-01-08",0.78206,{"date":407,"score":214,"percentile":408},"2026-01-09",0.78211,{"date":410,"score":214,"percentile":411},"2026-01-10",0.78213,{"date":413,"score":214,"percentile":414},"2026-01-11",0.78205,{"date":416,"score":214,"percentile":417},"2026-01-12",0.78193,{"date":419,"score":214,"percentile":420},"2026-01-13",0.7819,{"date":422,"score":214,"percentile":423},"2026-01-14",0.78212,{"date":425,"score":214,"percentile":426},"2026-01-15",0.78215,{"date":428,"score":214,"percentile":429},"2026-01-16",0.78223,{"date":431,"score":214,"percentile":432},"2026-01-17",0.78231,{"date":434,"score":214,"percentile":435},"2026-01-18",0.78225,{"date":437,"score":214,"percentile":429},"2026-01-19",{"date":439,"score":214,"percentile":440},"2026-01-20",0.78217,{"date":442,"score":214,"percentile":443},"2026-01-21",0.78222,{"date":445,"score":214,"percentile":369},"2026-01-22",{"date":447,"score":214,"percentile":448},"2026-01-23",0.78257,{"date":450,"score":214,"percentile":451},"2026-01-24",0.78269,{"date":453,"score":214,"percentile":454},"2026-01-25",0.78264,{"date":456,"score":214,"percentile":457},"2026-01-26",0.78258,{"date":459,"score":214,"percentile":460},"2026-01-27",0.78255,{"date":462,"score":214,"percentile":463},"2026-01-28",0.7826,{"date":465,"score":214,"percentile":466},"2026-01-29",0.78256,{"date":468,"score":214,"percentile":469},"2026-01-30",0.78259,{"date":471,"score":214,"percentile":472},"2026-01-31",0.78261,{"date":474,"score":214,"percentile":475},"2026-02-01",0.78367,[477],{"source":110,"cvss_v2_0":478,"cvss_v3_0":483,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":479,"baseSeverity":9,"vectorString":480,"impactScore":481,"exploitabilityScore":482},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,10,{"baseScore":108,"baseSeverity":484,"vectorString":111,"impactScore":485,"exploitabilityScore":482},"HIGH",6,[487],{"ecosystem":9,"name":488,"vendor":488,"product":488,"cpe_part":489,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":490},"qemu","a",[491],{"version":492,"is_range":28,"range_type":493,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.0.0","cpe"]