[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBclQyxyuDOpgfBdMwtdpwgpNEPyn9suXIAlMYceANKw":3,"g5a-family:opensuse\u002Fbackports_sle":117,"g5a-ex:opensuse\u002Fbackports_sle@*":118},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":82,"seoMetadata":95,"meta":114},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":16},"opensuse","backports_sle",1,329,3,"2022-09-07",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},"15.0","Backports Sle by Opensuse is a technology product with 1 tracked version and 329 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},[20,29,35,42,49,54,60,66,71,76],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2020-13379","The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user\u002Fclient to make Grafana send HTTP requests to any URL and return its result to the user\u002Fclient. This can be used to gain information about the network that Grafana is running on. Furthermore, passing invalid URL objects could be used for DOS'ing Grafana via SegFault.","2020-06-03",8.2,"v3.1","High",false,0.99856,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":34},"CVE-2019-5736","runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to \u002Fproc\u002Fself\u002Fexe.","2019-02-11",8.6,0.98452,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":25,"severity":40,"isKev":27,"epssScore":41},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":25,"severity":47,"isKev":4,"epssScore":48},"CVE-2020-12641","rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","2020-05-04",9.8,"Critical",0.84456,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":46,"cvssVersion":25,"severity":47,"isKev":27,"epssScore":53},"CVE-2020-26935","An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query.","2020-10-10",0.67081,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":59},"CVE-2018-16873","In Go before 1.10.6 and 1.11.x before 1.11.3, the \"go get\" command is vulnerable to remote code execution when executed with the -u flag and the import path of a malicious Go package, or a package that imports it directly or indirectly. Specifically, it is only vulnerable in GOPATH mode, but not in module mode (the distinction is documented at https:\u002F\u002Fgolang.org\u002Fcmd\u002Fgo\u002F#hdr-Module_aware_go_get). Using custom domains, it's possible to arrange things so that a Git repository is cloned to a folder named \".git\" by using a vanity import path that ends with \"\u002F.git\". If the Git repository root contains a \"HEAD\" file, a \"config\" file, an \"objects\" directory, a \"refs\" directory, with some work to ensure the proper ordering of operations, \"go get -u\" can be tricked into considering the parent directory as a repository root, and running Git commands on it. That will use the \"config\" file in the original Git repository root for its configuration, and if that config file contains malicious commands, they will execute on the system running \"go get -u\".","2018-12-14",8.1,0.66252,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":25,"severity":47,"isKev":4,"epssScore":65},"CVE-2020-15999","Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-11-03",9.6,0.63894,{"cveId":67,"description":68,"publishedDate":63,"cvssScore":69,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":70},"CVE-2020-16009","Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",8.8,0.48293,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":69,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":75},"CVE-2019-13767","Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.","2020-01-10",0.15537,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":81},"CVE-2018-19052","An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ..\u002F path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '\u002F' character, but the alias target filesystem path does have a trailing '\u002F' character.","2018-11-07",7.5,0.13714,[83,88,92],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":47,"isKev":4,"epssScore":48,"cisaVulnName":84,"cisaDateAdded":85,"cisaShortDescription":86,"cisaRequiredAction":87},"Roundcube Webmail Remote Code Execution Vulnerability","2023-06-22","Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.","Apply updates per vendor instructions.",{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"severity":47,"isKev":4,"epssScore":65,"cisaVulnName":89,"cisaDateAdded":90,"cisaShortDescription":91,"cisaRequiredAction":87},"Google Chrome FreeType Heap Buffer Overflow Vulnerability","2021-11-03","Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.",{"cveId":67,"description":68,"publishedDate":63,"cvssScore":69,"severity":26,"isKev":4,"epssScore":70,"cisaVulnName":93,"cisaDateAdded":90,"cisaShortDescription":94,"cisaRequiredAction":87},"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"title":96,"metaDescription":97,"keywords":98,"structuredData":99},"Backports Sle by Opensuse - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Backports Sle by Opensuse covering 1 version with 329 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Backports Sle vulnerabilities, Backports Sle security, Backports Sle CVE, Opensuse Backports Sle, Backports Sle threat intelligence, Opensuse security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Backports Sle KEV, Backports Sle exploited vulnerabilities",{"@context":100,"@type":101,"name":102,"description":97,"url":103,"manufacturer":104,"applicationCategory":108,"softwareVersion":109,"mainEntity":110},"https:\u002F\u002Fschema.org","SoftwareApplication","Backports Sle","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fopensuse\u002Fbackports_sle",{"@type":105,"name":106,"url":107},"Organization","Opensuse","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fopensuse","Security Software","1 versions tracked",{"@type":111,"name":112,"description":113,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Backports Sle Security Vulnerabilities","Security vulnerabilities affecting Backports Sle by Opensuse",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":115,"apiVersion":116},"2026-10-17T15:07:05.494Z","3.0",[],{"rows":119,"total":11,"capped":27,"failed":134},[120,126,130],{"cveId":43,"name":84,"severity":47,"cvss":46,"added":85,"epss":48,"published":121,"ranges":122,"checked":4,"hits":125,"covers":27},"2020-05-04T15:15:14.417",[123,124],"15.0-sp1","15.0-sp2",[],{"cveId":61,"name":89,"severity":47,"cvss":64,"added":90,"epss":65,"published":127,"ranges":128,"checked":4,"hits":129,"covers":27},"2020-11-03T03:15:14.853",[124],[],{"cveId":67,"name":93,"severity":26,"cvss":69,"added":90,"epss":70,"published":131,"ranges":132,"checked":4,"hits":133,"covers":27},"2020-11-03T03:15:15.527",[123,124],[],0]