Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-12-27	CVE-2019-20015	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GNU LibreDWG 0.92. network low complexity gnu opensuse CWE-770	6.5
2019-12-27	CVE-2019-20013	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GNU LibreDWG before 0.93. network low complexity gnu opensuse CWE-770	6.5
2019-12-27	CVE-2019-20012	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GNU LibreDWG 0.92. network low complexity gnu opensuse CWE-770	6.5
2019-12-27	CVE-2019-20009	Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GNU LibreDWG before 0.93. network low complexity gnu opensuse CWE-770	6.5
2019-12-16	CVE-2019-16779	Race Condition vulnerability in multiple products In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as by a timeout) would leave data on the socket. network high complexity excon-project opensuse debian CWE-362	5.9
2019-12-10	CVE-2019-13745	Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. network low complexity google debian suse opensuse fedoraproject redhat	6.5
2019-11-26	CVE-2019-14856	Improper Authentication vulnerability in multiple products ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None network low complexity redhat opensuse CWE-287	6.5
2019-11-25	CVE-2019-13719	Insecure Storage of Sensitive Information vulnerability in multiple products Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. network low complexity google opensuse CWE-922	4.3
2019-11-25	CVE-2019-13718	Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. network low complexity google opensuse	4.3
2019-11-25	CVE-2019-13717	Insecure Storage of Sensitive Information vulnerability in multiple products Incorrect security UI in full screen mode in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to hide security UI via a crafted HTML page. network low complexity google opensuse CWE-922	4.3