Backports Sle vulnerabilitiesAnd the versions its exploited flaws hit.
Backports Sle is made by Opensuse. We track 329 published vulnerabilities in it, across 1 version. 3 of them are on the list of flaws known to be exploited, the newest added on 22 June 2023. If you run Backports Sle, check your version against the exploited flaws below and patch those first.
The most recent Backports Sle flaw added to the known-exploited list is CVE-2020-12641, on 22 June 2023. We keep watching the known-exploited list.
Which versions of Backports Sle do the exploited flaws hit?
Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.
- CVE-2020-12641Exploited list, 22 Jun 2023
Roundcube Webmail Remote Code Execution Vulnerability
15.0-sp115.0-sp2 - CVE-2020-15999Exploited list, 3 Nov 2021
Google Chrome FreeType Heap Buffer Overflow Vulnerability
15.0-sp2 - CVE-2020-16009Exploited list, 3 Nov 2021
Google Chromium V8 Type Confusion Vulnerability
15.0-sp115.0-sp2
Which Backports Sle vulnerabilities are being exploited?
3 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Roundcube Webmail Remote Code Execution Vulnerability
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
- 9.6Google Chrome FreeType Heap Buffer Overflow Vulnerability
Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts.
- 8.8Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Which Backports Sle flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%CVE-2020-13379High
The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue.
- 98%CVE-2019-5736High
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command...
- 87%CVE-2019-11358Medium
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution.
- 84%
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
- 67%CVE-2020-26935Critical
An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3.
- 66%CVE-2018-16873High
In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it...
- 64%
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 48%
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- 16%CVE-2019-13767High
Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
- 14%CVE-2018-19052High
An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50.
Running Backports Sle? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
- Matched to
- Backports Sle on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 329 published vulnerabilities listed under the name Backports Sle, across 1 version. The most recent Backports Sle flaw added to the known-exploited list is CVE-2020-12641, on 22 June 2023.
3 are on the list of flaws known to be exploited. The most recently added are CVE-2020-12641, CVE-2020-15999 and CVE-2020-16009.
Each flaw names its own versions, usually as ranges. The newest, CVE-2020-12641, affects 15.0-sp1, 15.0-sp2. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Backports Sle. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.