CVE-2015-6593

CVE-2015-6593 is rejected/not used; reference CVE-2014-6593 instead.

CVE-2015-0191

CVE-2015-0191 is a duplicate of CVE-2014-0191. Connected records confirm the vulnerability affects libxml2 (before 2.9.2) where XML external parameter entities could be loaded regardless of substitution/validation, enabling potential DoS or information leakage via crafted XML. The issue stems fro...

CVE-2015-8146

CVE-2014-8146 affects ICU4C (Unicode Bidirectional Algorithm) prior to 55.1; the resolveImplicitLevels in common/ubidi.c fails to track directionally isolated text pieces, enabling remote DoS via a heap-based buffer overflow and potentially arbitrary code execution. Remediation in the connected d...

CVE-2015-2235

CVE-2015-2235 is rejected and not used; this entry does not represent an active vulnerability.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0607. Reason: This candidate is a duplicate of CVE-2015-0607. The wrong ID was used. Notes: All CVE users should reference CVE-2015-0607 instead of this candidate. All references and descriptions in this candidate have been...

SuSE 11.3 Security Update : php53 (SAT Patch Number 10313)

PHP 5.3 was updated to fix three security issues : - Use-after-free vulnerability allowed remote attackers to execute arbitrary code via a crafted unserialize call that leveraged improper handling of duplicate keys within the serialized properties of an object. bnc910659. CVE-2014-8142 -...

CVE-2015-2010

CVE-2015-0010 is detailed in connected records as a Windows kernel-mode driver vulnerability in cng.sys (CryptProtectMemory). The issue arises when CRYPTPROTECTMEMORY_SAME_LOGON does not validate the impersonation token level, allowing local users to bypass decryption restrictions by abusing a se...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7169. Reason: This candidate is a duplicate of CVE-2014-7169. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-7169 instead of this candidate. All references and descriptions in this...

CVE-2015-0246

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1493. Reason: This candidate is a reservation duplicate of CVE-2015-1493. Notes: All CVE users should reference CVE-2015-1493 instead of this candidate. All references and descriptions in this candidate have been removed to...

kernel: net: sctp: fix panic on duplicate ASCONF chunks

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled duplicate Address Configuration Change Chunks ASCONF. A remote attacker could use either of these flaws to crash the system...

Design/Logic Flaw

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate...

UBUNTU-CVE-2015-0231

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate...

kernel: net: sctp: fix panic on duplicate ASCONF chunks

A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled duplicate Address Configuration Change Chunks ASCONF. A remote attacker could use either of these flaws to crash the system...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6271. Reason: This candidate is a duplicate of CVE-2014-6271. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-6271 instead of this candidate. All references and descriptions in this...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2352. Reason: This candidate is a duplicate of CVE-2014-2352. The wrong ID was used. Notes: All CVE users should reference CVE-2014-2352 instead of this candidate. All references and descriptions in this candidate have been...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2354. Reason: This candidate is a duplicate of CVE-2014-2354. The wrong ID was used. Notes: All CVE users should reference CVE-2014-2354 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2014-62771

CVE-2014-62771 is rejected and not used; reference CVE-2014-6271 instead.

CVE-2014-72038

CVE-2014-72038 is rejected and should not be used.

CVE-2014-32537

CVE-2014-32537 is linked to Cogent DataHub vulnerability details published under CVE-2014-2354. The issue is that Cogent DataHub before version 7.3.5 stores usernames/passwords without a salt, reducing hash uniqueness and enabling brute-force attacks to recover cleartext passwords. The affected p...

CVE-2015-0222

ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when showhiddeninitial is set to True, allows remote attackers to cause a denial of service by submitting duplicate values, which triggers a large number of SQL queries...