BS
Product
Backports Sle
On CISA KEVExploited in the wild
326
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 169Medium 129Low 1
Watch
Add Backports Sle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6528 | 4.3 | Jul 22 | Incorrect security UI in basic auth in Google Chrome on iOS prior to 84.0.4147.89 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6527 | 4.3 | Jul 22 | Insufficient policy enforcement in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6516 | 4.3 | Jul 22 | Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: 15.0; 15.0 |
| CVE-2020-6490 | 4.3 | May 21 | Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted… Affected: 15.0 |
| CVE-2020-6489 | 4.3 | May 21 | Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer… Affected: 15.0 |
| CVE-2020-6488 | 4.3 | May 21 | Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2020-6438 | 4.3 | Apr 13 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain… Affected: 15.0 |
| CVE-2020-1770 | 4.3 | Mar 27 | Support bundle generated files could contain sensitive information that might be unwanted to be disclosed Affected: 15.0; 15.0; 15.0 |
| CVE-2020-1769 | 4.3 | Mar 27 | In the login screens (in agent and customer interface), Username and Password fields use autocomplete, which might be considered as security issue Affected: 15.0; 15.0; 15.0 |
| CVE-2020-6403 | 4.3 | Feb 11 | Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 15.0 |
| CVE-2020-6396 | 4.3 | Feb 11 | Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 15.0 |
| CVE-2020-6392 | 4.3 | Feb 11 | Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to bypass navigation… Affected: 15.0 |
| CVE-2020-6391 | 4.3 | Feb 11 | Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page Affected: 15.0 |
| CVE-2019-18179 | 4.3 | Jan 6 | An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.12, and Community Edition 5.0.x through 5.0.38 and 6.0.x through 6.0.23 Affected: 15.0; 15.0; 15.0 |
| CVE-2019-13719 | 4.3 | Nov 25 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page Affected: 15.0 |
| CVE-2019-13718 | 4.3 | Nov 25 | Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name Affected: 15.0 |
| CVE-2019-13717 | 4.3 | Nov 25 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page Affected: 15.0 |
| CVE-2019-13716 | 4.3 | Nov 25 | Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2019-13715 | 4.3 | Nov 25 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted… Affected: 15.0 |
| CVE-2019-13710 | 4.3 | Nov 25 | Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page Affected: 15.0 |
| CVE-2019-13708 | 4.3 | Nov 25 | Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted… Affected: 15.0 |
| CVE-2019-13704 | 4.3 | Nov 25 | Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: 15.0 |
| CVE-2019-13703 | 4.3 | Nov 25 | Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a… Affected: 15.0 |
| CVE-2019-13701 | 4.3 | Nov 25 | Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page Affected: 15.0 |
| CVE-2019-10740 | 4.3 | Apr 7 | In Roundcube Webmail before 1.3.10, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email Affected: 15.0; 15.0 |
| CVE-2019-9495 | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns Affected: 15.0; 15.0 |