BS
Product
Backports Sle
by Opensuse · last CVE Nov 3, 2020
On CISA KEVExploited in the wild
326
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 169Medium 129Low 1
Watch

Add Backports Sle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-15967
8.8
1%
Nov 3
Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 15.0
CVE-2020-6576
8.8
2%
Sep 21
Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-6559
8.8
2%
Sep 21
Use after free in presentation API in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-15965
8.8
3%
Sep 21
Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-15964
8.8
3%
Sep 21
Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-15962
8.8
2%
Sep 21
Insufficient policy validation in serial in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML…
Affected: 15.0; 15.0
CVE-2020-15960
8.8
2%
Sep 21
Heap buffer overflow in storage in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-24972
8.8
5%
Aug 29
The Kleopatra component before 3.1.12 (and before 20.07.80) for GnuPG allows remote attackers to execute arbitrary code because openpgp4fpr: URLs are supported without safe…
Affected: 15.0
CVE-2020-24614
8.8
3%
Aug 25
Fossil before 2.10.2, 2.11.x before 2.11.2, and 2.12.x before 2.12.1 allows remote authenticated users to execute arbitrary code
Affected: 15.0; 15.0
CVE-2020-8233
8.8
4%
Aug 17
A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface,…
Affected: 15.0; 15.0
CVE-2020-6534
8.8
2%
Jul 22
Heap buffer overflow in WebRTC in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6533
8.8
2%
Jul 22
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6530
8.8
1%
Jul 22
Out of bounds memory access in developer tools in Google Chrome prior to 84.0.4147.89 allowed an attacker who convinced a user to install a malicious extension to potentially…
Affected: 15.0; 15.0
CVE-2020-6525
8.8
2%
Jul 22
Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-6524
8.8
3%
Jul 22
Heap buffer overflow in WebAudio in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6523
8.8
3%
Jul 22
Out of bounds write in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6520
8.8
3%
Jul 22
Buffer overflow in Skia in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-6518
8.8
3%
Jul 22
Use after free in developer tools in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had convinced the user to use developer tools to potentially exploit heap…
Affected: 15.0
CVE-2020-6517
8.8
3%
Jul 22
Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-6515
8.8
3%
Jul 22
Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0; 15.0
CVE-2020-6513
8.8
3%
Jul 22
Heap buffer overflow in PDFium in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 15.0; 15.0
CVE-2020-6512
8.8
3%
Jul 22
Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6496
8.8
1%
Jun 3
Use after free in payments in Google Chrome on MacOS prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page
Affected: 15.0
CVE-2020-6474
8.8
2%
May 21
Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6468
8.8
6%
May 21
Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6467
8.8
2%
May 21
Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6463
8.8
3%
May 21
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6454
8.8
1%
Apr 13
Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap…
Affected: 15.0
CVE-2020-6451
8.8
1%
Apr 13
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6450
8.8
1%
Apr 13
Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6448
8.8
2%
Apr 13
Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6447
8.8
2%
Apr 13
Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to potentially exploit…
Affected: 15.0
CVE-2020-6436
8.8
2%
Apr 13
Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6434
8.8
2%
Apr 13
Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6430
8.8
2%
Apr 13
Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6423
8.8
2%
Apr 13
Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6449
8.8
3%
Mar 23
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6429
8.8
2%
Mar 23
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6428
8.8
2%
Mar 23
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6427
8.8
2%
Mar 23
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6424
8.8
3%
Mar 23
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6422
8.8
2%
Mar 23
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-9273
8.8
12%
Feb 20
In ProFTPD 1.3.7, it is possible to corrupt the memory pool by interrupting the data transfer channel
Affected: 15.0; 15.0
CVE-2020-6416
8.8
2%
Feb 11
Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6415
8.8
2%
Feb 11
Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6414
8.8
2%
Feb 11
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page
Affected: 15.0
CVE-2020-6413
8.8
2%
Feb 11
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page
Affected: 15.0
CVE-2020-6404
8.8
2%
Feb 11
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: 15.0
CVE-2020-6402
8.8
3%
Feb 11
Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute…
Affected: 15.0
CVE-2020-6398
8.8
2%
Feb 11
Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: 15.0
Page 2 of 7 · 326 total
123…7