BA
Product
Backports
by Opensuse · last CVE Feb 19, 2022
97
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 40Medium 49Low 0
Watch

Add Backports to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-6455
8.8
2%
Apr 13
Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2020-6452
8.8
2%
Apr 13
Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2020-6443
8.8
2%
Apr 13
Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary…
Affected: sle-15
CVE-2020-6439
8.8
2%
Apr 13
Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page
Affected: sle-15
CVE-2019-13730
8.8
2%
Dec 10
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-13723
8.8
1%
Nov 25
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption…
Affected: sle-15
CVE-2019-5836
8.8
1%
Jun 27
Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5831
8.8
2%
Jun 27
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5829
8.8
1%
Jun 27
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: sle-15
CVE-2019-5828
8.8
1%
Jun 27
Object lifecycle issue in ServiceWorker in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page
Affected: sle-15
CVE-2019-5827
8.8
2%
Jun 27
Integer overflow in SQLite via WebSQL in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5824
8.8
1%
Jun 27
Parameter passing error in media in Google Chrome prior to 74.0.3729.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5822
8.8
2%
Jun 27
Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page
Affected: sle-15
CVE-2019-5821
8.8
1%
Jun 27
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: sle-15
CVE-2019-5820
8.8
1%
Jun 27
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file
Affected: sle-15
CVE-2019-5817
8.8
2%
Jun 27
Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5816
8.8
2%
Jun 27
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page
Affected: sle-15
CVE-2019-5813
8.8
1%
Jun 27
Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5811
8.8
1%
Jun 27
Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page
Affected: sle-15
CVE-2019-5809
8.8
2%
Jun 27
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a…
Affected: sle-15
CVE-2019-5808
8.8
2%
Jun 27
Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5807
8.8
1%
Jun 27
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5806
8.8
1%
Jun 27
Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-5795
8.8
1%
May 23
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file
Affected: sle-15
CVE-2019-5792
8.8
1%
May 23
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file
Affected: sle-15
CVE-2019-5791
8.8
2%
May 23
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page
Affected: sle-15
CVE-2019-5790
8.8
2%
May 23
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a…
Affected: sle-15
CVE-2019-5789
8.8
9%
May 23
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process…
Affected: sle-15
CVE-2019-5788
8.8
9%
May 23
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer…
Affected: sle-15
CVE-2019-5787
8.8
2%
May 23
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
Affected: sle-15
CVE-2019-11328
8.8
2%
May 14
An issue was discovered in Singularity 3.1.0 to 3.2.0-rc2, a malicious user with local/network access to the host system (e.g
Affected: sle-15; sle-15
CVE-2019-7443
8.1
2%
May 7
KDE KAuth before 5.55 allows the passing of parameters with arbitrary types to helpers running as root over DBus via DBusHelperProxy.cpp
Affected: All versions, or not specified
CVE-2019-15613
8.0
1%
Feb 4
A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes
Affected: sle-15
CVE-2021-45082
7.8
0%
Feb 19
An issue was discovered in Cobbler before 3.3.1
Affected: sle-15; sle-15
CVE-2020-0561
7.8
0%
Feb 13
Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access
Affected: sle-15
CVE-2019-14524
7.8
1%
Aug 2
An issue was discovered in Schism Tracker through 20190722
Affected: sle-15; sle-15
CVE-2019-5819
7.8
0%
Jun 27
Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to…
Affected: sle-15
CVE-2020-10592
7.5
3%
Mar 23
Tor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to cause a Denial of Service (CPU consumption), aka TROVE-2020-002
Affected: sle-15
CVE-2019-5163
7.5
3%
Dec 3
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2
Affected: sle-15
CVE-2019-5459
7.1
3%
Jul 30
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read
Affected: sle-15
Showing 40