BS
Product
Backports Sle
On CISA KEVExploited in the wild
326
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 169Medium 129Low 1
Watch
Add Backports Sle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-15982 | 6.5 | Nov 3 | Inappropriate implementation in cache in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a… Affected: 15.0 |
| CVE-2020-15981 | 6.5 | Nov 3 | Out of bounds read in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: 15.0 |
| CVE-2020-15977 | 6.5 | Nov 3 | Insufficient data validation in dialogs in Google Chrome on OS X prior to 86.0.4240.75 allowed a remote attacker to obtain potentially sensitive information from disk via a… Affected: 15.0 |
| CVE-2020-15973 | 6.5 | Nov 3 | Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same… Affected: 15.0 |
| CVE-2020-6568 | 6.5 | Sep 21 | Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML… Affected: 15.0; 15.0 |
| CVE-2020-6567 | 6.5 | Sep 21 | Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions… Affected: 15.0; 15.0 |
| CVE-2020-6566 | 6.5 | Sep 21 | Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6565 | 6.5 | Sep 21 | Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML… Affected: 15.0; 15.0 |
| CVE-2020-6564 | 6.5 | Sep 21 | Inappropriate implementation in permissions in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6563 | 6.5 | Sep 21 | Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to obtain potentially sensitive information from… Affected: 15.0; 15.0 |
| CVE-2020-6562 | 6.5 | Sep 21 | Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6561 | 6.5 | Sep 21 | Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6560 | 6.5 | Sep 21 | Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6558 | 6.5 | Sep 21 | Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6526 | 6.5 | Jul 22 | Inappropriate implementation in iframe sandbox in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6521 | 6.5 | Jul 22 | Side-channel information leakage in autofill in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to obtain potentially sensitive information from process memory via a… Affected: 15.0; 15.0 |
| CVE-2020-6519 | 6.5 | Jul 22 | Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6514 | 6.5 | Jul 22 | Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a… Affected: 15.0; 15.0 |
| CVE-2020-6511 | 6.5 | Jul 22 | Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6494 | 6.5 | Jun 3 | Incorrect security UI in payments in Google Chrome on Android prior to 83.0.4103.97 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML… Affected: 15.0 |
| CVE-2020-6491 | 6.5 | May 21 | Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name Affected: 15.0 |
| CVE-2020-6487 | 6.5 | May 21 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6486 | 6.5 | May 21 | Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6485 | 6.5 | May 21 | Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation… Affected: 15.0 |
| CVE-2020-6484 | 6.5 | May 21 | Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request Affected: 15.0 |
| CVE-2020-6483 | 6.5 | May 21 | Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6482 | 6.5 | May 21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass… Affected: 15.0 |
| CVE-2020-6481 | 6.5 | May 21 | Insufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to perform domain spoofing via a crafted domain name Affected: 15.0 |
| CVE-2020-6480 | 6.5 | May 21 | Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions Affected: 15.0 |
| CVE-2020-6479 | 6.5 | May 21 | Inappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 15.0 |
| CVE-2020-6478 | 6.5 | May 21 | Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 15.0 |
| CVE-2020-6476 | 6.5 | May 21 | Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation… Affected: 15.0 |
| CVE-2020-6475 | 6.5 | May 21 | Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 15.0 |
| CVE-2020-6473 | 6.5 | May 21 | Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a… Affected: 15.0 |
| CVE-2020-6472 | 6.5 | May 21 | Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain… Affected: 15.0 |
| CVE-2020-12108 | 6.5 | May 6 | /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection Affected: 15.0; 15.0 |
| CVE-2020-6426 | 6.5 | Mar 23 | Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2019-12921 | 6.5 | Mar 18 | In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG Affected: 15.0 |
| CVE-2020-6408 | 6.5 | Feb 11 | Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page Affected: 15.0 |
| CVE-2020-6401 | 6.5 | Feb 11 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted… Affected: 15.0 |
| CVE-2020-6400 | 6.5 | Feb 11 | Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0 |
| CVE-2020-6399 | 6.5 | Feb 11 | Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0 |
| CVE-2020-6397 | 6.5 | Feb 11 | Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: 15.0 |
| CVE-2020-6393 | 6.5 | Feb 11 | Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0 |
| CVE-2020-6615 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl) Affected: 15.0 |
| CVE-2020-6611 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c Affected: 15.0 |
| CVE-2019-5846 | 6.5 | Jan 3 | Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2019-5845 | 6.5 | Jan 3 | Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2019-5844 | 6.5 | Jan 3 | Out of bounds access in SwiftShader in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page Affected: 15.0 |
| CVE-2019-14864 | 6.5 | Jan 2 | Ansible, versions 2.9.x before 2.9.1, 2.8.x before 2.8.7 and Ansible versions 2.7.x before 2.7.15, is not respecting the flag no_log set it to True when Sumologic and Splunk… Affected: 15.0 |