BA
Product
Backports
97
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 40Medium 49Low 0
Watch
Add Backports to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-6446 | 6.5 | Apr 13 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: sle-15 |
| CVE-2020-6445 | 6.5 | Apr 13 | Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: sle-15 |
| CVE-2020-6610 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c Affected: sle-15 |
| CVE-2019-13713 | 6.5 | Nov 25 | Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-16709 | 6.5 | Sep 23 | ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage Affected: sle-15; sle-15 |
| CVE-2019-5837 | 6.5 | Jun 27 | Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-5835 | 6.5 | Jun 27 | Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page Affected: sle-15 |
| CVE-2019-5834 | 6.5 | Jun 27 | Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: sle-15 |
| CVE-2019-5832 | 6.5 | Jun 27 | Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-5830 | 6.5 | Jun 27 | Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-5818 | 6.5 | Jun 27 | Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video… Affected: sle-15 |
| CVE-2019-5814 | 6.5 | Jun 27 | Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-5810 | 6.5 | Jun 27 | Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML… Affected: sle-15 |
| CVE-2019-5805 | 6.5 | Jun 27 | Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file Affected: sle-15 |
| CVE-2019-5803 | 6.5 | May 23 | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML… Affected: sle-15 |
| CVE-2019-5801 | 6.5 | May 23 | Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page Affected: sle-15 |
| CVE-2019-5800 | 6.5 | May 23 | Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page Affected: sle-15 |
| CVE-2019-5799 | 6.5 | May 23 | Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via… Affected: sle-15 |
| CVE-2019-5798 | 6.5 | May 23 | Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page Affected: sle-15 |
| CVE-2019-5793 | 6.5 | May 23 | Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted… Affected: sle-15 |
| CVE-2020-15803 | 6.1 | Jul 17 | Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget Affected: sle-15; sle-15 |
| CVE-2021-46142 | 5.5 | Jan 6 | An issue was discovered in uriparser before 0.9.6 Affected: sle-15 |
| CVE-2021-46141 | 5.5 | Jan 6 | An issue was discovered in uriparser before 0.9.6 Affected: sle-15 |
| CVE-2019-18899 | 5.5 | Jan 23 | The apt-cacher-ng package of openSUSE Leap 15.1 runs operations in user owned directory /run/apt-cacher-ng with root privileges Affected: sle-15 |
| CVE-2020-5202 | 5.5 | Jan 21 | apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port Affected: sle-15 |
| CVE-2019-20053 | 5.5 | Dec 27 | An invalid memory address dereference was discovered in the canUnpack function in p_mach.cpp in UPX 3.95 via a crafted Mach-O file Affected: sle-15 |
| CVE-2019-13707 | 5.5 | Nov 25 | Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application Affected: sle-15 |
| CVE-2019-5460 | 5.5 | Jul 30 | Double Free in VLC versions <= 3.0.6 leads to a crash Affected: sle-15; sle-15 |
| CVE-2019-5804 | 5.5 | May 23 | Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name Affected: sle-15 |
| CVE-2020-6425 | 5.4 | Mar 23 | Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site… Affected: sle-15 |
| CVE-2019-5823 | 5.4 | Jun 27 | Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: sle-15 |
| CVE-2019-13711 | 5.3 | Nov 25 | Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2019-15624 | 4.9 | Feb 4 | Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders Affected: sle-15 |
| CVE-2020-6442 | 4.3 | Apr 13 | Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page Affected: sle-15 |
| CVE-2020-6441 | 4.3 | Apr 13 | Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page Affected: sle-15 |
| CVE-2020-6440 | 4.3 | Apr 13 | Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially… Affected: sle-15 |
| CVE-2020-6437 | 4.3 | Apr 13 | Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application Affected: sle-15 |
| CVE-2020-6435 | 4.3 | Apr 13 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation… Affected: sle-15 |
| CVE-2020-6433 | 4.3 | Apr 13 | Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: sle-15 |
| CVE-2020-6432 | 4.3 | Apr 13 | Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: sle-15 |
| CVE-2020-6431 | 4.3 | Apr 13 | Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted HTML page Affected: sle-15 |
| CVE-2019-13705 | 4.3 | Nov 25 | Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin… Affected: sle-15 |
| CVE-2019-10163 | 4.3 | Jul 30 | A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent… Affected: sle-15; sle-15 |
| CVE-2019-5840 | 4.3 | Jun 27 | Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page Affected: sle-15 |
| CVE-2019-5839 | 4.3 | Jun 27 | Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a… Affected: sle-15 |
| CVE-2019-5838 | 4.3 | Jun 27 | Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass… Affected: sle-15 |
| CVE-2019-5833 | 4.3 | Jun 27 | Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page Affected: sle-15 |