|
222211
|
3.7 |
LOW
Network
|
openssl
|
openssl
|
In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a very large number of messages to be decrypted, can recov…
|
CWE-327 CWE-203
Use of a Broken or Risky Cryptographic Algorithm Information Exposure Through Discrepancy
|
CVE-2019-1563
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222212
|
5.3 |
MEDIUM
Network
|
openssl
|
openssl
|
OpenSSL 1.1.1 introduced a rewritten random number generator (RNG). This was intended to include protection in the event of a fork() system call in order to ensure that the parent and child processes…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2019-1549
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222213
|
4.7 |
MEDIUM
Local
|
openssl
|
openssl
|
Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit paramet…
|
NVD-CWE-noinfo
|
CVE-2019-1547
|
2024-11-21 13:36 |
2019-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222214
|
5.6 |
MEDIUM
Local
|
microsoft redhat
|
windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019 windows_7 enterprise_linux_desktop enterprise_linux_wo…
|
An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged …
|
NVD-CWE-noinfo
|
CVE-2019-1125
|
2024-11-21 13:36 |
2019-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222215
|
8.0 |
HIGH
Network
|
paloaltonetworks
|
twistlock
|
Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to escalate privileges to that of another us…
|
CWE-79
Cross-site Scripting
|
CVE-2019-1583
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222216
|
7.2 |
HIGH
Network
|
paloaltonetworks
|
pan-os
|
Memory corruption in PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow an administrative user to cause arbitrary memory corruption by rekeying the current client interactive session.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1582
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222217
|
9.8 |
CRITICAL
Network
|
paloaltonetworks
|
pan-os
|
A remote code execution vulnerability in the PAN-OS SSH device management interface that can lead to unauthenticated remote users with network access to the SSH management interface gaining root acce…
|
CWE-20
Improper Input Validation
|
CVE-2019-1581
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222218
|
9.8 |
CRITICAL
Network
|
paloaltonetworks
|
pan-os
|
Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secur…
|
CWE-787
Out-of-bounds Write
|
CVE-2019-1580
|
2024-11-21 13:36 |
2019-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222219
|
7.2 |
HIGH
Network
|
cisco
|
unified_computing_system integrated_management_controller_supervisor
|
A vulnerability in the Intelligent Platform Management Interface (IPMI) of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands that…
|
CWE-78
OS Command
|
CVE-2019-1634
|
2024-11-21 13:36 |
2019-08-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
222220
|
8.8 |
HIGH
Network
|
microsoft
|
active_directory_authentication_library nuget
|
An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in the way the library caches tokens. This vulnerability allows an authenticated att…
|
NVD-CWE-noinfo
|
CVE-2019-1258
|
2024-11-21 13:36 |
2019-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|