wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5880. Reason: This candidate is a duplicate of CVE-2013-5880. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2013-5880 instead of this candidate. All references and descriptions in this...

CVE-2014-5880

CVE-2014-5880 is a duplicate of CVE-2013-5880. Oracle Demantra 12.2.1 includes an authentication bypass: the loginCheck.jsp whitelisted URL can be accessed unauthenticated to reach restricted pages. A fix exists in 12.2.3. Public details cite Portcullis advisories and the associated CVE-2013-5880...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5795. Reason: This candidate is a duplicate of CVE-2013-5795. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2013-5795 instead of this candidate. All references and descriptions in this...

CVE-2014-5795

CVE-2014-5795 is a duplicate entry of CVE-2013-5795 and has been marked as not to be used. Connected sources confirm this CVE-ID is a duplicate of CVE-2013-5795, and all details for 2014-5795 were removed to prevent accidental usage. The substantive vulnerability is described in CVE-2013-5795 as ...

CVE-2012-6430

Cross-site scripting XSS vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140...

CVE-2012-6430

Cross-site scripting XSS vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140...

Slack: Duplicate of #4550

Here's the duplicate ticket you asked for 4550 XSS in Slack Redirection...

CVE-2014-1277

CVE-2014-1277 is rejected and not an active vulnerability entry; reference CVE-2013-3948.

Yahoo!: XSS using yql and developers console proxy

Thank you for your submission to Yahoo’s Bug Bounty. While we recognize the effort that you put into the research and writing of a report for us to evaluate, we found this report to be a duplicate of another. We appreciate your adherence to responsible disclosure guidelines and look forward to yo...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-1690. Reason: This candidate is a reservation duplicate of CVE-2014-1690. Notes: All CVE users should reference CVE-2014-1690 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing...

CVE-2013-7314

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing...

CVE-2013-6488

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0328. Reason: This candidate is a reservation duplicate of CVE-2013-0328. Notes: All CVE users should reference CVE-2013-0328 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0328. Reason: This candidate is a reservation duplicate of CVE-2013-0328. Notes: All CVE users should reference CVE-2013-0328 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6345. Reason: This candidate is a duplicate of CVE-2013-6345. Notes: All CVE users should reference CVE-2013-6345 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6346. Reason: This candidate is a duplicate of CVE-2013-6346. Notes: All CVE users should reference CVE-2013-6346 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-3702

CVE-2013-3702 is a duplicate of CVE-2013-6344. The connected records describe a vulnerability in Novell ZENworks Configuration Management (ZCM): the ZCC page prior to version 11.2.4 allows cross-frame scripting via unknown vectors. No exploit details or affected products beyond ZCM/ZCC are provid...

CVE-2013-3698

CVE-2013-3698 is a duplicate of CVE-2013-6346 and, per the connected records, corresponds to a CSRF vulnerability in Novell ZENworks Configuration Management (ZCM) ZCC pages prior to version 11.2.4 that could allow remote attackers to hijack user authentication. The related CVE (CVE-2013-6346) de...

CVE-2013-3701

CVE-2013-3701 is a duplicate of CVE-2013-6345 and is superseded. According to connected documents, CVE-2013-6345 describes an unspecified vulnerability in Novell ZENworks Configuration Management (ZCM) before 11.2.4, with unknown impact and attack vectors related to an "Application Exception" on ...