CVE-2010-4559

CVE-2010-4559 is rejected/not used; refer to CVE-2010-4670 and CVE-2010-4671.

CVE-2010-4560

CVE-2010-4560 is a duplicate of CVE-2010-4669 and refers to an ICMPv6 router advertisement flooding DoS affecting IPv6 implementations. The connected records describe remote DoS via flood of ICMPv6 Neighbor Solicitation/Router Advertisement messages impacting Windows 7 and earlier, Cisco/Juniper/...

CVE-2011-4123

CVE-2011-4123 is a duplicate of CVE-2011-3874. The underlying issue is a vulnerability in Android's libsysutils (FrameworkListener::dispatchCommand) on affected Android versions (2.2.x–2.3.x) that can lead to remote code execution when handling command arguments. Multiple sources describe a stack...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

DEBIAN-CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0287

Cross-site scripting XSS vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected"...

CVE-2012-0026

CVE-2012-0026 is a duplicate of CVE-2012-0287. The connected records describe a WordPress 3.3.x XSS vulnerability (pre-3.3.1) that can be triggered by a crafted request, allowing arbitrary script execution in a user’s browser. Affected product: WordPress 3.3.x prior to 3.3.1. Root cause : cross-s...

ssh-hostkey NSE Script

Shows SSH hostkeys. Shows the target SSH server's key fingerprint and with high enough verbosity level the public key itself. It records the discovered host keys in nmap.registry for use by other scripts. Output can be controlled with the sshhostkey script argument. You may also compare the...

CVE-2011-4084

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-4858. Reason: This candidate is a duplicate of CVE-2011-4858. Notes: All CVE users should reference CVE-2011-4858 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2011-4084

CVE-2011-4084 is rejected/not used; reference CVE-2011-4858.

DSA-2370-1 unbound - several

Bulletin has no description...

CVE-2011-4779

CVE-2011-4642 affects Splunk Web (Splunk 4.2.x before 4.2.5). The mappy.py component allows remote authenticated admins to execute arbitrary code via the sys module in a crafted request to the search app, enabling CSRF-like abuse. Upgrade to Splunk 4.2.5 or later. Note: CVE-2011-4779 is a reserva...

Unbound multiple denial-of-service vulnerabilities

Overview A specially crafted DNS query containing signed duplicate resource records or a malformed NSEC3 signed resource record may cause Unbound to crash. Description NLnetLabs advisory states:== Description 1: crash on signed duplicate Resource Records There are authoritative servers that...

CVE-2011-4323

CVE-2011-4323 is a duplicate of CVE-2011-2726 (Drupal 7.x before 7.5). The connected data confirms an access bypass: non-privileged users can download a file attached to a comment if they know or guess the direct URL, even when the parent node is denied access, provided file upload fields or priv...

CVE-2011-3633

CVE-2011-3633 is rejected/not used per the Initial Description.

CVE-2011-4331

CVE-2011-4331 is rejected and should not be used; use CVE-2011-4110 instead.

CVE-2011-2708

This CVE-2011-2708 entry is rejected/not used and should reference CVE-2011-2710.

kernel: taskstats: duplicate entries in listener mode can lead to DoS

The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...