Opensuse Backports vulnerabilities, page 5
97 vulnerabilities
Known vulnerabilities in Opensuse Backports, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-5819debianchromium+6
EPSS score0.39%
Insufficient data validation in developer tools in Google Chrome on OS X prior to 74.0.3729.108 allowed a local attacker to execute arbitrary code via a crafted string copied to clipboard.CVE-2019-5792debianchromium+4EPSS score1.22%
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.CVE-2019-5804ubuntuchromium-browser+3EPSS score0.26%
Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name.CVE-2019-5823debianchromium+6EPSS score1.07%
Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.CVE-2019-5803debianchromium+4EPSS score1.03%
Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.CVE-2019-5793debianchromium+4EPSS score0.99%
Insufficient policy enforcement in extensions in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to initiate the extensions installation user interface via a crafted HTML page.CVE-2019-5789debianchromium+4EPSS score9.26%
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.CVE-2019-5816ubuntuchromium-browser+4EPSS score1.65%
Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.CVE-2019-5833debianchromium+6EPSS score0.96%
Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.CVE-2019-5831debianchromium+6EPSS score1.92%
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5809debianchromium+6EPSS score1.51%
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.CVE-2019-5790debianchromium+4EPSS score2.33%
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2019-5787debianchromium+4EPSS score1.92%
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2019-5834debiandebian_linux+4EPSS score1.26%
Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.CVE-2019-10163debianpdns+5EPSS score1.00%
A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.CVE-2019-15624nextcloudnextcloud_server+2EPSS score1.47%
Improper Input Validation in Nextcloud Server 15.0.7 allows group admins to create users with IDs of system folders.CVE-2019-15613mageianextcloud+2EPSS score1.13%
A bug in Nextcloud Server 17.0.1 causes the workflow rules to depend their behaviour on the file extension when checking file mimetypes.