5304 matches found
Design/Logic Flaw
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
CVE-2019-13727
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
CVE-2019-13729
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-13729
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-13729
CVE-2019-13729 : Use-after-free in Chrome’s WebSockets before 79.0.3945.79 allowing remote heap corruption via a crafted HTML page. Affected: Google Chrome (WebSockets) on legacy builds up to 79.0.3945.79. Root cause: use-after-free in the WebSockets implementation. Impact: heap corruption; remot...
CVE-2019-13729
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-13727
CVE-2019-13727 is a policy-enforcement error in Chrome’s WebSockets implementation that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 79.0.3945.79, with the issue explicitly tied to insufficient po...
CVE-2019-13727
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
CVE-2019-13727
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
CVE-2019-13729: Use After Free
Use-after-free in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2019-13727: Improper Preservation of Permissions
Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page...
KLA11621 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after...
PT-2019-5055
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to a use-after-free in WebSockets, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This may lead to unauthorized access to...
PT-2019-5053
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to insufficient policy enforcement in WebSockets, allowing a remote attacker to bypass the same origin policy. This can be achieved via a crafted HTML page,...
io.undertow:undertow-servlet (1.0.0.beta2), io.undertow:undertow-websockets-jsr (1.0.0.beta2) potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.0.0.beta2)
io.undertow:undertow-core MAVEN version 1.0.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta2 - io.undertow:undertow-websockets-jsr 1.0.0.beta2 Source cves:...
io.undertow:undertow-servlet (1.1.6.final), io.undertow:undertow-websockets-jsr (1.1.6.final) potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.6.final)
io.undertow:undertow-core MAVEN version 1.1.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.6.final - io.undertow:undertow-websockets-jsr 1.1.6.final Source cves:...
io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.0.0.alpha11)
io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...
io.undertow:undertow-http2-test-suite (1.3.0.beta1), io.undertow:undertow-servlet (1.3.0.beta1) +2 more potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.3.0.beta1)
io.undertow:undertow-core MAVEN version 1.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta1 - io.undertow:undertow-servlet 1.3.0.beta1 -...
io.undertow:undertow-servlet (1.1.5.final), io.undertow:undertow-websockets-jsr (1.1.5.final) potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.5.final)
io.undertow:undertow-core MAVEN version 1.1.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.5.final - io.undertow:undertow-websockets-jsr 1.1.5.final Source cves:...
io.undertow:undertow-servlet (1.1.0.cr8), io.undertow:undertow-websockets-jsr (1.1.0.cr8) potentially affected by CVE-2019-10212 via io.undertow:undertow-core (1.1.0.cr8)
io.undertow:undertow-core MAVEN version 1.1.0.cr8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr8 - io.undertow:undertow-websockets-jsr 1.1.0.cr8 Source cves:...