|
221751
|
6.5 |
MEDIUM
Network
|
microsoft
|
lync
|
An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
|
CWE-200
Information Exposure
|
CVE-2019-1209
|
2024-11-21 13:36 |
2019-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221752
|
7.5 |
HIGH
Network
|
microsoft
|
internet_explorer
|
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-123…
|
CWE-416
Use After Free
|
CVE-2019-1208
|
2024-11-21 13:36 |
2019-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221753
|
5.5 |
MEDIUM
Local
|
microsoft
|
.net_framework
|
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerabil…
|
CWE-22
Path Traversal
|
CVE-2019-1142
|
2024-11-21 13:36 |
2019-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221754
|
7.5 |
HIGH
Network
|
microsoft
|
edge
chakracore
|
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. Th…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1138
|
2024-11-21 13:36 |
2019-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221755
|
3.7 |
LOW
Network
|
openssl
|
openssl
|
In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recov…
|
CWE-327
CWE-203
Use of a Broken or Risky Cryptographic Algorithm
Information Exposure Through Discrepancy
|
CVE-2019-1563
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221756
|
5.3 |
MEDIUM
Network
|
openssl
|
openssl
|
OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2019-1549
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221757
|
4.7 |
MEDIUM
Local
|
openssl
|
openssl
|
Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit paramet…
|
NVD-CWE-noinfo
|
CVE-2019-1547
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221758
|
5.6 |
MEDIUM
Local
|
microsoft
redhat
|
windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019
windows_7
enterprise_linux_desktop
enterprise_linux_wo…
|
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged …
|
NVD-CWE-noinfo
|
CVE-2019-1125
|
2024-11-21 13:36 |
2019-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221759
|
8.0 |
HIGH
Network
|
paloaltonetworks
|
twistlock
|
Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to escalate privileges to that of another us…
|
CWE-79
Cross-site Scripting
|
CVE-2019-1583
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
221760
|
7.2 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client interactive session.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1582
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
