CVE-2021-36217

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. A...

CVE-2020-19715

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate...

UBUNTU-CVE-2021-31291

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-31291

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-31291

CVE-2021-31291 is a duplicate of CVE-2021-29457 and is not a separate active entry. Various advisories (CentOS CESA-2021:3158, AlmaLinux ALSA-2021-3152/3153, Amazon ALAS2-2021-1701) reference a heap-based buffer overflow in Exiv2, specifically in jp2image.cpp during doWriteMetadata, triggered whe...

UBUNTU-CVE-2019-25051

objstack in GNU Aspell 0.60.8 has a heap-based buffer overflow in acommon::ObjStack::duptop called from acommon::StringMap::add and acommon::Config::lookuplist...

CVE-2021-3648

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority for the following reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3530. Reason: This candidate is a reservation duplicate of CVE-2021-3530. Notes: All CVE users should reference CVE-2021-3530 instead of this...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-13110 Reason: This candidate is a duplicate of CVE-2019-13110. Notes: All CVE users should reference CVE-2019-13110 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-31224: Undefined Security Weakness

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

ALPINE-CVE-2021-36217

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-36217

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-3502. Reason: This candidate is a duplicate of CVE-2021-3502. Notes: All CVE users should reference CVE-2021-3502 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

Virtuozzo Hybrid Server 7.5 Update 1 Hotfix 4 (7.5.1-739)

The Hotfix 4 for Virtuozzo Hybrid Server 7.5 Update 1 provides a stability and usability bug fix. Vulnerability id: PSBM-130698 Migrating a container from Virtuozzo 6 to Virtuozzo Hybrid Server 7 with the '--keep-src' option could result in duplicate UUIDs in 'prlctl list' output on the destinati...

Insurance slippage reimbursement can be used to steal insurance fund

Handle cmichel Vulnerability details The Liquidation contract allows the liquidator to submit "bad" trade orders and the insurance reimburses them from the insurance fund, see Liquidation.claimReceipt. The function can be called with an orders array which does not check for duplicate orders. An...

CVE-2021-3556

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Assigned but a duplicate for CVE-2021-3559...

CVE-2021-3556

CVE-2021-3556 is withdrawn/duplicate of CVE-2021-3559. Connected records describe the underlying issue in libvirt: in virConnectListAllNodeDevices API before 7.0.0, an unprivileged, read-only client can crash the libvirt daemon by executing nodedev-list. This affects hosts with a PCI device/drive...

CVE-2018-1138

CVE-2018-1138 is a withdrawn/duplicate entry (duplicate of CVE-2019-14827). The connected records provide concrete details for CVE-2019-14827: in Moodle, a JavaScript injection (XSS) vulnerability exists in Mustache templates due to recursive rendering where unescaped context data can be injected...

CVE-2020-18666

CVE-2020-18664 (and CVE-2020-18666 as a duplicate) describe a Cross Site Scripting (XSS) vulnerability in WebPort ≤ 1.19.1, exploitable via the connection name parameter in type-conn. Connected sources (Red Hat, NVD, CVE listings) confirm WebPort is a remote access/preventive maintenance device a...

HackerOne: Report Duplicate Detector can match deleted and draft reports, may disclose title and vulnerability information

When a Report is submitted on HackerOne.com, a feature called the Report Duplicate Detector helps program members and triagers find potential duplicates of the submitted report. This feature will match against all reports that were submitted to the program. When the feature was introduced, all...

Duplicate Advisory: gosaml2 is vulnerable to NULL Pointer Dereference from malformed XML signatures

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-prjq-f4q3-fvfr. This link is maintained to preserve external references. Original Description This affects all versions less than 0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on null...

NVIDIA OTE 代码问题漏洞

Nvidia NVIDIA OTE is a standalone, software-partitioned environment from Nvidia Corporation in the United States that provides Trusted Operations. The NVIDIA OTE suffers from a code issue vulnerability that stems from the fact that Trusty includes a vulnerability in all TAs where its deserializer...