5855 matches found
CVE-2004-2770
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-3389. Reason: This candidate is a duplicate of CVE-2011-3389. Notes: All CVE users should reference CVE-2011-3389 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2004-2770
CVE-2004-2770 is a duplicate of CVE-2011-3389. The connected documents describe CVE-2011-3389, a vulnerability in SSL 3.0 and TLS 1.0 CBC-mode handling that can allow an attacker to recover portions of plaintext. Reports and advisories show mitigations and fixes across vendors: Mitigation: in som...
WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Duplicate plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip Version: 1.2 tested --- PoC ---...
WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress MM Duplicate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- class mmduplicatepagesposts ... function mmduplicatepagesposts ... addaction'init', array&$this,...
CVE-2011-2810
CVE-2011-2810 is rejected/not used; reference CVE-2011-0253 instead.
Duplicate e-mail notifications sent when a backup or replication job is completed.
When your backup or replication job is completed, you receive duplicate e-mail notifications...
ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability
ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-239 July 27, 2011 -- CVE ID: CVE-2011-0233 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple WebKit --...
logout.action is not protected against XSRF
This is a duplicate of CONF-21758. Please only resolve this ticket when CONF-21758 is fixed...
CVE-2011-1501
CVE-2011-1501 is rejected/not used; refer to CVE-2011-1571.
DEBIAN-CVE-2010-4767
Open Ticket Request System OTRS before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service duplicate tickets and duplicate auto-response...
CVE-2011-0745
SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover 1 the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or 2 t...
CVE-2011-1415
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1290. Reason: This candidate is a duplicate of CVE-2011-1290. Notes: All CVE users should reference CVE-2011-1290 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2011-1415
CVE-2011-1415 entry rejected; not used. Use CVE-2011-1290 instead.
CVE-2007-1783
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1685. Reason: This candidate is a duplicate of CVE-2007-1685. Notes: All CVE users should reference CVE-2007-1685 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-1685. Reason: This candidate is a duplicate of CVE-2007-1685. Notes: All CVE users should reference CVE-2007-1685 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2007-1783
CVE-2007-1783 is rejected/not used; consult CVE-2007-1685 instead.
postgresql security update
8.4.7-1.el60.1 - Update to PostgreSQL 8.4.7, for various fixes described at http://www.postgresql.org/docs/8.4/static/release-8-4-7.html http://www.postgresql.org/docs/8.4/static/release-8-4-6.html including the fix for CVE-2010-4015 Resolves: 672634 8.4.5-1.el60.2 - Ensure we don't package any...
CVE-2009-0190
This CVE-2009-0190 entry is rejected; refer to CVE-2009-1016.
CVE-2009-0189
CVE-2009-0189 is rejected/not used and does not represent an active vulnerability entry.
CVE-2010-4570
Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...