Opensuse Backports vulnerabilities, page 2
97 vulnerabilities
Known vulnerabilities in Opensuse Backports, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-6441debianchromium+6
EPSS score1.77%
Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.CVE-2020-6443debianchromium+6EPSS score1.85%
Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.CVE-2020-6439debianchromium+6EPSS score1.82%
Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.CVE-2020-6442debianchromium+6EPSS score1.95%
Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2020-6455debianchromium+6EPSS score2.03%
Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2020-6445debianchromium+6EPSS score1.95%
Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.CVE-2020-6610gnulibredwg+2EPSS score1.37%
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.CVE-2020-6493debianchromium+5EPSS score1.72%
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.CVE-2020-6440debianchromium+6EPSS score1.18%
Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.CVE-2020-6456debianchromium+6EPSS score1.42%
Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents.CVE-2019-16709canonicalubuntu_linux+11EPSS score2.81%
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.CVE-2019-13711debianchromium+3EPSS score1.18%
Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2019-13723debianchromium+7EPSS score1.49%
Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.CVE-2019-13730debianchromium+10EPSS score1.95%
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-13707debianchromium+3EPSS score0.45%
Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.CVE-2019-13705debianchromium+3EPSS score0.58%
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.CVE-2019-13713debianchromium+3EPSS score1.14%
Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2019-19950debiangraphicsmagick+5EPSS score2.37%
In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.CVE-2019-19951debiangraphicsmagick+5EPSS score2.57%
In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.CVE-2019-19953debiangraphicsmagick+5EPSS score2.44%
In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.