Opensuse Backports Sle vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Opensuse Backports Sle: 10 record(s), with affected versions and fixes.cpe:2.3:a:opensuse:backports_sle
CVE-2020-16009
High · 8.8
KEV High · 56 CWE-787 Nov 3, 2020
Google Chromium V8 Type Confusion Vulnerability
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-15999
Critical · 9.6
KEV High · 60 CWE-787 Nov 3, 2020
Google Chrome FreeType Heap Buffer Overflow Vulnerability
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-12641
Critical · 9.8
KEV High · 67 Public exploit CWE-78 May 4, 2020
Roundcube Webmail Remote Code Execution Vulnerability
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
CVE-2019-19925
High · 7.5
CWE-434 Dec 24, 2019
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive.
CVE-2019-19923
High · 7.5
CWE-476 Dec 24, 2019
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results).
CVE-2019-19926
High · 7.5
CWE-476 Dec 22, 2019
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...
multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.
CVE-2019-19880
High · 7.5
CWE-476 Dec 18, 2019
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...
exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.
CVE-2019-5459
High · 7.1
CWE-191 Jul 30, 2019
Integer Underflow in Videolan Vlc Media Player
An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
CVE-2019-13962
Critical · 9.8
CWE-125 Jul 18, 2019
Out-of-bounds Read in Videolan Vlc Media Player
lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it does not properly validate the width and height.
CVE-2019-13602
High · 7.8
CWE-191 Jul 14, 2019
Integer Underflow in Videolan Vlc Media Player
An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and crash) or possibly have unspecified other impact via a crafted .mp4 file.