CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2019-13717 – chromium-browser: Notification obscured
https://notcve.org/view.php?id=CVE-2019-13717
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. Una interfaz de usuario de seguridad incorrecta en full screen mode en Google Chrome versiones anteriores a 78.0.3904.70, permitió a un atacante remoto ocultar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html https://crbug.com/839239 https://access.redhat.com/security/cve/CVE-2019-13717 https://bugzilla.redhat.com/show_bug.cgi?id=1764773 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2019-13718 – chromium-browser: IDN spoof
https://notcve.org/view.php?id=CVE-2019-13718
Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Una comprobación de datos insuficiente en Omnibox en Google Chrome versiones anteriores a 78.0.3904.70, permitió a un atacante remoto realizar una suplantación de dominios mediante homógrafos IDN por medio de un nombre de dominio diseñado. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html https://crbug.com/866162 https://access.redhat.com/security/cve/CVE-2019-13718 https://bugzilla.redhat.com/show_bug.cgi?id=1764774 •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2019-13719 – chromium-browser: Notification obscured
https://notcve.org/view.php?id=CVE-2019-13719
Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. Una interfaz de usuario de seguridad incorrecta en full screen mode en Google Chrome versiones anteriores a 78.0.3904.70, permitió a un atacante remoto ocultar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00008.html https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html https://crbug.com/927150 https://access.redhat.com/security/cve/CVE-2019-13719 https://bugzilla.redhat.com/show_bug.cgi?id=1764775 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2019-14856 – ansible: Incomplete fix for CVE-2019-10206
https://notcve.org/view.php?id=CVE-2019-14856
ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None ansible versiones anteriores a 2.8.6, 2.7.14, 2.6.20 es vulnerable a un None The fix for CVE-2019-10206 was found to be incomplete for the data disclosure flaw in ansible. Password prompts in ansible-playbook and ansible-cli tools could expose passwords with special characters as they are not properly wrapped. A password with special characters is exposed starting with the first of these special characters. The highest threat from this vulnerability is to data confidentiality. • http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00021.html http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00026.html https://access.redhat.com/errata/RHSA-2020:0756 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14856 https://access.redhat.com/security/cve/CVE-2019-14856 https://bugzilla.redhat.com/show_bug.cgi?id=1760829 • CWE-287: Improper Authentication •
CVSS: 9.8EPSS: 1%CPEs: 10EXPL: 0CVE-2019-17545
https://notcve.org/view.php?id=CVE-2019-17545
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded. GDAL versiones hasta 3.0.1, presenta una vulnerabilidad de doble liberación de poolDestroy en la función OGRExpatRealloc en el archivo ogr/ogr_expat.cpp cuando se excede el umbral de 10 MB. • http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00022.html https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16178 https://github.com/OSGeo/gdal/commit/148115fcc40f1651a5d15fa34c9a8c528e7147bb https://lists.debian.org/debian-lts-announce/2019/11/msg00005.html https://lists.debian.org/debian-lts-announce/2022/01/msg00004.html https://lists.debian.org/debian-lts-announce/2022/09/msg00040.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message& • CWE-415: Double Free •