|
218941
|
8.8 |
HIGH
Network
|
google
|
chrome
|
Use after free in WebAudio in Google Chrome prior to 76.0.3809.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-5851
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218942
|
9.6 |
CRITICAL
Network
|
google
|
chrome
|
Use after free in offline mode in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag…
|
CWE-416
Use After Free
|
CVE-2019-5850
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218943
|
8.1 |
HIGH
Network
|
google
|
chrome
|
Out of bounds read in Skia in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
|
CWE-125
Out-of-bounds Read
|
CVE-2019-5849
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218944
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Incorrect font handling in autofill in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2019-5848
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218945
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Inappropriate implementation in JavaScript in Google Chrome prior to 75.0.3770.142 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-5847
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218946
|
6.5 |
MEDIUM
Network
|
google
|
chrome
|
Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-5842
|
2024-11-21 13:45 |
2019-11-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218947
|
7.5 |
HIGH
Network
|
beckhoff
|
twincat
|
When Beckhoff TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending a malformed UDP packet to the device. This issue affects TwinCAT 2 ve…
|
CWE-369
Divide By Zero
|
CVE-2019-5637
|
2024-11-21 13:45 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218948
|
7.5 |
HIGH
Network
|
beckhoff
|
twincat
|
When a Beckhoff TwinCAT Runtime receives a malformed UDP packet, the ADS Discovery Service shuts down. Note that the TwinCAT devices are still performing as normal. This issue affects TwinCAT 2 versi…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2019-5636
|
2024-11-21 13:45 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218949
|
9.8 |
CRITICAL
Network
|
netapp
|
ontap_select_deploy_administration_utility
|
ONTAP Select Deploy administration utility versions 2.11.2 through 2.12.2 are susceptible to a code injection vulnerability which when successfully exploited could allow an unauthenticated remote att…
|
CWE-94
Code Injection
|
CVE-2019-5509
|
2024-11-21 13:45 |
2019-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
218950
|
7.7 |
HIGH
Network
|
vmware
|
fusion workstation
|
VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with no…
|
NVD-CWE-noinfo
|
CVE-2019-5542
|
2024-11-21 13:45 |
2019-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|