Backports Sle (Opensuse) - vulnerabilities (CVEs)

326 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2020-11-03. Vendor: Opensuse.

CVEs of Backports Sle

• CVE-2020-6557 - CVSS 6.5 (medium), 2020-11-03: Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
• CVE-2020-16004 - CVSS 8.8 (high), 2020-11-03: Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-16007 - CVSS 7.8 (high), 2020-11-03: Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted…
• CVE-2020-16011 - CVSS 9.6 (critical), 2020-11-03: Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to…
• CVE-2020-16003 - CVSS 8.8 (high), 2020-11-03: Use after free in printing in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-16006 - CVSS 8.8 (high), 2020-11-03: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-16009 - CVSS 8.8 (high), 2020-11-03: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-16002 - CVSS 8.8 (high), 2020-11-03: Use after free in PDFium in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
• CVE-2020-16005 - CVSS 8.8 (high), 2020-11-03: Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2020-16008 - CVSS 8.8 (high), 2020-11-03: Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC…
• CVE-2020-16001 - CVSS 8.8 (high), 2020-11-03: Use after free in media in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15988 - CVSS 6.3 (medium), 2020-11-03: Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files…
• CVE-2020-15991 - CVSS 8.8 (high), 2020-11-03: Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially…
• CVE-2020-16000 - CVSS 8.8 (high), 2020-11-03: Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2020-15987 - CVSS 8.8 (high), 2020-11-03: Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.
• CVE-2020-15990 - CVSS 8.8 (high), 2020-11-03: Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a…
• CVE-2020-15999 - CVSS 9.6 (critical), 2020-11-03: Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-15989 - CVSS 5.5 (medium), 2020-11-03: Uninitialized data in PDFium in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory…
• CVE-2020-15992 - CVSS 8.8 (high), 2020-11-03: Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to…
• CVE-2020-15979 - CVSS 8.8 (high), 2020-11-03: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-15982 - CVSS 6.5 (medium), 2020-11-03: Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from…
• CVE-2020-15985 - CVSS 6.5 (medium), 2020-11-03: Inappropriate implementation in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to spoof security UI via a crafted HTML page.
• CVE-2020-15972 - CVSS 8.8 (high), 2020-11-03: Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15975 - CVSS 8.8 (high), 2020-11-03: Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15978 - CVSS 8.8 (high), 2020-11-03: Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer…
• CVE-2020-15981 - CVSS 6.5 (medium), 2020-11-03: Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory…
• CVE-2020-15984 - CVSS 6.5 (medium), 2020-11-03: Insufficient policy enforcement in Omnibox in Google Chrome on iOS prior to 86.0.4240.75 allowed a remote attacker to spoof the contents of the Omnibox (URL…
• CVE-2020-15974 - CVSS 8.8 (high), 2020-11-03: Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.
• CVE-2020-15977 - CVSS 6.5 (medium), 2020-11-03: Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information…
• CVE-2020-15980 - CVSS 7.8 (high), 2020-11-03: Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via…
• CVE-2020-15983 - CVSS 7.8 (high), 2020-11-03: Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a…
• CVE-2020-15986 - CVSS 6.5 (medium), 2020-11-03: Integer overflow in media in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15973 - CVSS 6.5 (medium), 2020-11-03: Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension…
• CVE-2020-15976 - CVSS 8.8 (high), 2020-11-03: Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-15969 - CVSS 8.8 (high), 2020-11-03: Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15968 - CVSS 8.8 (high), 2020-11-03: Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-15971 - CVSS 8.8 (high), 2020-11-03: Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a…
• CVE-2020-15967 - CVSS 8.8 (high), 2020-11-03: Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
• CVE-2020-15970 - CVSS 8.8 (high), 2020-11-03: Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a…
• CVE-2020-25829 - CVSS 7.5 (high), 2020-10-16: An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a…
• CVE-2020-15229 - CVSS 9.3 (critical), 2020-10-14: Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack…
• CVE-2020-26934 - CVSS 6.1 (medium), 2020-10-10: phpMyAdmin before 4.9.6 and 5.x before 5.0.3 allows XSS through the transformation feature via a crafted link.
• CVE-2020-26935 - CVSS 9.8 (critical), 2020-10-10: An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin…
• CVE-2020-26164 - CVSS 5.5 (medium), 2020-10-07: In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU,…
• CVE-2020-11800 - CVSS 9.8 (critical), 2020-10-07: Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code.
• CVE-2020-8228 - CVSS 5.3 (medium), 2020-10-05: A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times.
• CVE-2019-11556 - CVSS 6.1 (medium), 2020-09-25: Pagure before 5.6 allows XSS via the templates/blame.html blame view.
• CVE-2020-6575 - CVSS 8.3 (high), 2020-09-21: Race in Mojo in Google Chrome prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…
• CVE-2020-6564 - CVSS 6.5 (medium), 2020-09-21: Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via…
• CVE-2020-6567 - CVSS 6.5 (medium), 2020-09-21: Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass…
• CVE-2020-6570 - CVSS 4.3 (medium), 2020-09-21: Information leakage in WebRTC in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information via a crafted…
• CVE-2020-6574 - CVSS 7.8 (high), 2020-09-21: Insufficient policy enforcement in installer in Google Chrome on OS X prior to 85.0.4183.102 allowed a local attacker to potentially achieve privilege…
• CVE-2020-6566 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
• CVE-2020-6569 - CVSS 6.3 (medium), 2020-09-21: Integer overflow in WebUSB in Google Chrome prior to 85.0.4183.83 allowed a remote attacker who had compromised the renderer process to potentially exploit…
• CVE-2020-6576 - CVSS 8.8 (high), 2020-09-21: Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-6573 - CVSS 9.6 (critical), 2020-09-21: Use after free in video in Google Chrome on Android prior to 85.0.4183.102 allowed a remote attacker who had compromised the renderer process to potentially…
• CVE-2020-6565 - CVSS 6.5 (medium), 2020-09-21: Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar)…
• CVE-2020-6568 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation…
• CVE-2020-6571 - CVSS 4.3 (medium), 2020-09-21: Insufficient data validation in Omnibox in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to perform domain spoofing via IDN homographs via a…
• CVE-2020-6558 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a…
• CVE-2020-6561 - CVSS 6.5 (medium), 2020-09-21: Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a…
• CVE-2020-6560 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
• CVE-2020-6563 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive…
• CVE-2020-6559 - CVSS 8.8 (high), 2020-09-21: Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-6562 - CVSS 6.5 (medium), 2020-09-21: Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
• CVE-2020-15966 - CVSS 4.3 (medium), 2020-09-21: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious…
• CVE-2020-15965 - CVSS 8.8 (high), 2020-09-21: Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML…
• CVE-2020-15960 - CVSS 8.8 (high), 2020-09-21: Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a…
• CVE-2020-15963 - CVSS 9.6 (critical), 2020-09-21: Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious…
• CVE-2020-15959 - CVSS 4.3 (medium), 2020-09-21: Insufficient policy enforcement in networking in Google Chrome prior to 85.0.4183.102 allowed an attacker who convinced the user to enable logging to obtain…
• CVE-2020-15962 - CVSS 8.8 (high), 2020-09-21: Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access…
• CVE-2020-15961 - CVSS 9.6 (critical), 2020-09-21: Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension…
• CVE-2020-15964 - CVSS 8.8 (high), 2020-09-21: Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2020-25032 - CVSS 7.5 (high), 2020-08-31: An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9. It allows ../ directory traversal to access private resources because…
• CVE-2020-14352 - CVSS 8 (high), 2020-08-30: A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository…
• CVE-2020-24972 - CVSS 8.8 (high), 2020-08-29: The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are…
• CVE-2020-24614 - CVSS 8.8 (high), 2020-08-25: Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code. An attacker must have…
• CVE-2020-8233 - CVSS 8.8 (high), 2020-08-17: A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over…
• CVE-2020-8026 - CVSS 8.4 (high), 2020-08-07: A Incorrect Default Permissions vulnerability in the packaging of inn in openSUSE Leap 15.2, openSUSE Tumbleweed, openSUSE Leap 15.1 allows local attackers…
• CVE-2020-17353 - CVSS 9.8 (critical), 2020-08-05: scm/define-stencil-commands.scm in LilyPond through 2.20.0, and 2.21.x through 2.21.4, when -dsafe is used, lacks restrictions on embedded-ps and…
• CVE-2020-16118 - CVSS 7.5 (high), 2020-07-29: In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH…
• CVE-2020-15917 - CVSS 9.8 (critical), 2020-07-23: common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled.
• CVE-2020-6524 - CVSS 8.8 (high), 2020-07-22: Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
• CVE-2020-6527 - CVSS 4.3 (medium), 2020-07-22: Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML…
• CVE-2020-6530 - CVSS 8.8 (high), 2020-07-22: Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious…
• CVE-2020-6534 - CVSS 8.8 (high), 2020-07-22: Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-6526 - CVSS 6.5 (medium), 2020-07-22: Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a…
• CVE-2020-6529 - CVSS 4.3 (medium), 2020-07-22: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data…
• CVE-2020-6533 - CVSS 8.8 (high), 2020-07-22: Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-6536 - CVSS 4.3 (medium), 2020-07-22: Incorrect security UI in PWAs in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had persuaded the user to install a PWA to spoof the…
• CVE-2020-6525 - CVSS 8.8 (high), 2020-07-22: Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-6528 - CVSS 4.3 (medium), 2020-07-22: Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via…
• CVE-2020-6531 - CVSS 4.3 (medium), 2020-07-22: Side-channel information leakage in scroll to text in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted…
• CVE-2020-6535 - CVSS 6.1 (medium), 2020-07-22: Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to inject…
• CVE-2020-6521 - CVSS 6.5 (medium), 2020-07-22: Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from…
• CVE-2020-6511 - CVSS 6.5 (medium), 2020-07-22: Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
• CVE-2020-6514 - CVSS 6.5 (medium), 2020-07-22: Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap…
• CVE-2020-6517 - CVSS 8.8 (high), 2020-07-22: Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-6520 - CVSS 8.8 (high), 2020-07-22: Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
• CVE-2020-6523 - CVSS 8.8 (high), 2020-07-22: Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.