Backports

backports

Vendor: Opensuse • 97 CVEs

CVEs (97)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-45082 4Cobbler Project FedoraprojectOpensuse+1 more 5Backports CobblerFactory+2 more Jun 17, 2026 Feb 19, 2022 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginni...Show more An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to import Python modules via the "#from MODULE import" substring. (Only lines beginning with #import are blocked.)Show less
CVE-2021-46142 4Debian FedoraprojectOpensuse+1 more 7Backports Debian LinuxExtra Packages For Enterprise Linux+4 more Jun 17, 2026 Jan 6, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriNormalizeSyntax.
CVE-2021-46141 4Debian FedoraprojectOpensuse+1 more 7Backports Debian LinuxExtra Packages For Enterprise Linux+4 more Jun 17, 2026 Jan 6, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 An issue was discovered in uriparser before 0.9.6. It performs invalid free operations in uriFreeUriMembers and uriMakeOwner.
CVE-2020-15803 4Debian FedoraprojectOpensuse+1 more 5Backports Debian LinuxFedora+2 more Jun 17, 2026 Jul 17, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.
CVE-2020-14983 2Chocolate Doom Opensuse 4Backports Chocolate DoomCrispy Doom+1 more Jun 17, 2026 Jun 22, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
CVE-2020-6495 3Debian GoogleOpensuse 4Backports ChromeDebian Linux+1 more Jun 17, 2026 Jun 3, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Ch...Show more Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.97 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.Show less
CVE-2020-6493 3Debian GoogleOpensuse 4Backports ChromeDebian Linux+1 more Jun 17, 2026 Jun 3, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2020-6456 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolation via crafted clipboard contents.
CVE-2020-6455 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6452 3Fedoraproject GoogleOpensuse 4Backports ChromeFedora+1 more Jun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6446 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVE-2020-6445 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVE-2020-6443 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user to use devtools to execute arbitrary code via a crafted HTML page.
CVE-2020-6442 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2020-6441 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
CVE-2020-6440 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome...Show more Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.Show less
CVE-2020-6439 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafted HTML page.
CVE-2020-6437 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted application.
CVE-2020-6435 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
CVE-2020-6433 4Debian FedoraprojectGoogle+1 more 5Backports ChromeDebian Linux+2 more Jun 17, 2026 Apr 13, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

12 3 4 5 Next