Opensuse Backports vulnerabilities, page 4
97 vulnerabilities
Known vulnerabilities in Opensuse Backports, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-5800debianchromium+4
EPSS score1.03%
Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.CVE-2019-5830debianchromium+6EPSS score1.37%
Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2019-5814debianchromium+6EPSS score0.91%
Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2019-5822debianchromium+6EPSS score1.85%
Inappropriate implementation in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.CVE-2019-5798canonicalubuntu_linux+11EPSS score3.21%
Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.CVE-2019-5836debianchromium+6EPSS score1.43%
Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5808debianchromium+6EPSS score1.76%
Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5820debianchromium+6EPSS score1.45%
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.CVE-2019-5835debianchromium+5EPSS score1.62%
Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.CVE-2019-5807debianchromium+6EPSS score1.38%
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5163debianshadowsocks-libev+4EPSS score2.64%
An exploitable denial-of-service vulnerability exists in the UDPRelay functionality of Shadowsocks-libev 3.3.2. When utilizing a Stream Cipher and a local_address, arbitrary UDP packets can cause a FATAL error code path and exit. An attacker can send arbitrary UDP packets to trigger this vulnerability.CVE-2019-5821debianchromium+6EPSS score1.42%
Integer overflow in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.CVE-2019-5813debianchromium+6EPSS score1.33%
Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5799debianchromium+4EPSS score1.45%
Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.CVE-2019-5801ubuntuchromium-browser+3EPSS score1.03%
Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.CVE-2019-5806debianchromium+6EPSS score1.27%
Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5818debianchromium+6EPSS score1.61%
Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.CVE-2019-5829debianchromium+6EPSS score1.27%
Integer overflow in download manager in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.CVE-2019-5811debianchromium+6EPSS score1.23%
Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.CVE-2019-5832debianchromium+6EPSS score1.25%
Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.