Vulnerabilities > Information Exposure Through Discrepancy

DATE CVE VULNERABILITY TITLE RISK
2019-11-25 CVE-2019-13684 Information Exposure Through Discrepancy vulnerability in Google Chrome
Inappropriate implementation in JavaScript in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
high complexity
google CWE-203
5.3
2019-11-25 CVE-2019-13666 Information Exposure Through Discrepancy vulnerability in Google Chrome
Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-203
7.4
2019-11-21 CVE-2019-18887 Information Exposure Through Discrepancy vulnerability in multiple products
An issue was discovered in Symfony 2.8.0 through 2.8.50, 3.4.0 through 3.4.34, 4.2.0 through 4.2.11, and 4.3.0 through 4.3.7.
network
high complexity
sensiolabs fedoraproject CWE-203
8.1
2019-11-21 CVE-2019-18886 Information Exposure Through Discrepancy vulnerability in Sensiolabs Symfony
An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7.
network
low complexity
sensiolabs CWE-203
5.3
2019-11-18 CVE-2019-10764 Information Exposure Through Discrepancy vulnerability in Simplito Elliptic-PHP
In elliptic-php versions priot to 1.0.6, Timing attacks might be possible which can result in practical recovery of the long-term private key generated by the library under certain conditions.
network
high complexity
simplito CWE-203
7.4
2019-11-14 CVE-2019-16863 Information Exposure Through Discrepancy vulnerability in ST products
STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL.
network
high complexity
st CWE-203
5.9
2019-11-02 CVE-2019-18673 Information Exposure Through Discrepancy vulnerability in Shiftcrypto Bitbox02
On SHIFT BitBox02 devices, a side channel for the row-based OLED display was found.
low complexity
shiftcrypto CWE-203
4.6
2019-11-02 CVE-2019-14360 Information Exposure Through Discrepancy vulnerability in Hyundai-Pay Hk-1000
On Hyundai Pay Kasse HK-1000 devices, a side channel for the row-based OLED display was found.
low complexity
hyundai-pay CWE-203
4.6
2019-11-02 CVE-2019-14358 Information Exposure Through Discrepancy vulnerability in Archos Safe-T
On Archos Safe-T devices, a side channel for the row-based OLED display was found.
low complexity
archos CWE-203
4.6
2019-10-31 CVE-2019-14356 Information Exposure Through Discrepancy vulnerability in Coinkite Coldcard MK1 Firmware and Coldcard MK2 Firmware
On Coldcard MK1 and MK2 devices, a side channel for the row-based OLED display was found.
network
low complexity
coinkite CWE-203
5.3