| CVE-2019-20010 | ALTO8.8 | An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. | 27/12/2019 |
| CVE-2019-20009 | MEDIO6.5 | An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec. | 27/12/2019 |
| CVE-2019-19925 | ALTO7.5 | zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive. | 24/12/2019 |
| CVE-2019-19923 | ALTO7.5 | flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or incorrect results). | 24/12/2019 |
| CVE-2019-19926 | ALTO7.5 | multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880. | 23/12/2019 |
| CVE-2019-19918 | ALTO7.8 | Lout 3.40 has a heap-based buffer overflow in the srcnext() function in z02.c. | 20/12/2019 |
| CVE-2019-19917 | ALTO7.8 | Lout 3.40 has a buffer overflow in the StringQuotedWord() function in z39.c. | 20/12/2019 |
| CVE-2019-19880 | ALTO7.5 | exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled. | 18/12/2019 |
| CVE-2019-16779 | MEDIO5.9 | In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. Subsequent requests would then read this data, returning content from the previous response. The race condition window appears to be sh | 16/12/2019 |
| CVE-2019-13764 | ALTO8.8 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 10/12/2019 |
| CVE-2019-13745 | MEDIO6.5 | Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | 10/12/2019 |
| CVE-2019-13734 | ALTO8.8 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 10/12/2019 |
| CVE-2019-5164 | ALTO7.8 | An exploitable code execution vulnerability exists in the ss-manager binary of Shadowsocks-libev 3.3.2. Specially crafted network packets sent to ss-manager can cause an arbitrary binary to run, resulting in code execution and privilege escalation. An attacker can send network packets to trigger this vulnerability. | 03/12/2019 |
| CVE-2019-14856 | MEDIO6.5 | ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None | 26/11/2019 |
| CVE-2019-13719 | MEDIO4.3 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. | 25/11/2019 |
| CVE-2019-13718 | MEDIO4.3 | Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. | 25/11/2019 |
| CVE-2019-13717 | MEDIO4.3 | Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. | 25/11/2019 |
| CVE-2019-13716 | MEDIO4.3 | Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | 25/11/2019 |
| CVE-2019-13715 | MEDIO4.3 | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. | 25/11/2019 |
| CVE-2019-13714 | MEDIO6.1 | Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL. | 25/11/2019 |