CVE-2023-3117

CVE-2023-3117 is a duplicate of CVE-2023-3390. The connected advisories describe CVE-2023-3390 as a use-after-free vulnerability in the Linux kernel nf_tables/nf_tables_api.c (netfilter) involving NFT_MSG_NEWRULE, enabling local privilege escalation in systems with CAP_NET_ADMIN. Remediation in t...

Duplicate Transactions

code.vegaprotocol.io/vega is vulnerable to Duplicate Transactions. The vulnerability allows an attacker to trick a validator node into processing duplicate transactions, resulting in 50x deposit amount...

CVE-2023-3327

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

WordPress Duplicate Post Page Menu & Custom Post Type Plugin <= 2.4.1 is vulnerable to Broken Access Control

Software Duplicate Post Page Menu & Custom Post Type Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36526 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID be002a065247 Credits...

PT-2023-24254

‼ CVE-2023-3327 ‼ REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2023-35170

Rejected reason: This CVE is a duplicate of another CVE...

Open redirect

Rejected reason: This CVE is a duplicate of another CVE...

CVE-2023-35170

CVE-2023-35170 is a duplicate entry for Sliver Cryptography issue described across multiple sources. The connected data identifies affected software: Sliver up to version 1.5.39, with improper cryptographic implementation enabling a Man-in-the-Middle (MitM) attack on implants when an attacker can...

CVE-2020-23064

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2020-23066

Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...

UBUNTU-CVE-2020-23064

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

UBUNTU-CVE-2020-23066

REJECT DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...

CVE-2020-23066

Removed by vendor...

CVE-2023-35163 Vega's validators able to submit duplicate transactions

Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For exampl...

CVE-2023-35163 Vega's validators able to submit duplicate transactions

Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For exampl...

Duplicate Advisory: Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk

Withdrawn This advisory has been withdrawn because it is a duplicate of GHSA-j2cr-jc39-wpx5. This link is maintained to preserve external references. Original Description The cosmos-sdk module is affected by the vulnerability codenamed "Barberry"...

GHSA-8RC9-VXJH-QJF2 Vega's validators able to submit duplicate transactions

A vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For example, a deposit to the collateral bridge for 100USDT that credits a party’s general account on Vega, can be re-processed 50 times resultin...

Vega's validators able to submit duplicate transactions

A vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For example, a deposit to the collateral bridge for 100USDT that credits a party’s general account on Vega, can be re-processed 50 times resultin...

CVE-2020-20703

Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand parameter...

SUSE CVE-2023-35825

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3141. Reason: This candidate is a reservation duplicate of CVE-2023-3141. Notes: All CVE users should reference CVE-2023-3141 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...