5852 matches found
CVE-2010-1738
CVE-2010-1738 is rejected/not used and does not represent an active vulnerability entry.
CVE-2010-1745
CVE-2010-1745 is rejected/not used; this candidate is a duplicate of CVE-2010-1867.
CVE-2010-1501
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1767. Reason: This candidate is a duplicate of CVE-2010-1767. Notes: All CVE users should reference CVE-2010-1767 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1767. Reason: This candidate is a duplicate of CVE-2010-1767. Notes: All CVE users should reference CVE-2010-1767 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-1501
CVE-2010-1501 entry is rejected and not used; reference CVE-2010-1767 instead.
Code injection
The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trigger unspecified "duplicate actions" via unknown vectors...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-1564. Reason: This candidate is a duplicate of CVE-2009-1564. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2009-1564 instead of this candidate. All references and descriptions in this...
CVE-2010-1564
CVE-2010-1564 is rejected/not used; this entry is a duplicate of CVE-2009-1564.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1241. Reason: This candidate is a duplicate of CVE-2010-1241. Notes: All CVE users should reference CVE-2010-1241 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-0200
CVE-2010-0200 is rejected/not used; a duplicate of CVE-2010-1241.
Signing in with username with different case creates new user
We currently utilize LDAP for our user repository and allow users to be automatically added to crucible if they can successfully authenticate. We have recently received complaints from users that their names were showing up two times in reviews. After some analysis we saw that there were 2...
Signing in with username with different case creates new user
We currently utilize LDAP for our user repository and allow users to be automatically added to crucible if they can successfully authenticate. We have recently received complaints from users that their names were showing up two times in reviews. After some analysis we saw that there were 2...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0969. Reason: This candidate is a duplicate of CVE-2010-0969. Notes: All CVE users should reference CVE-2010-0969 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2010-0735
CVE-2010-0735 is a duplicate of CVE-2010-0969 (Rejected reason in the initial entry). Connected documents describe CVE-2010-0969 as a remote denial-of-service vulnerability in Unbound DNS resolver, caused by improper allocation of sock_list structures before version 1.4.3. Affected product: Unbound
Microsoft SMB NTLM Authentication Lack of Entropy (MS10-012; CVE-2010-0231)
The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. An elevation of privilege vulnerability has been reported in the way that Microsoft Server Message Block SMB Protocol software handles authentication attempts. The vulnerability is due to a lack of...
CVE-2009-4481
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-3111. Reason: This candidate is a duplicate of CVE-2009-3111. Notes: All CVE users should reference CVE-2009-3111 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2009-4481
CVE-2009-3111 (FreeRADIUS) is a remote denial-of-service vulnerability in the radiusd daemon caused by a flaw in rad_decode handling of Tunnel-Password attributes with zero length. The issue can crash radiusd via specially crafted RADIUS packets. Remediation observed in connected advisories inclu...
CVE-2009-3908
CVE-2009-3908 is a duplicate and explicitly rejected; not an active vulnerability entry.
CVE-2009-3907
CVE-2009-3907 is a duplicate of CVE-2009-3607. The underlying issue is in Poppler (0.x): integer overflow in create_surface_from_thumbnail_data (glib/poppler-page.cc) that can cause memory corruption, potentially leading to denial of service or remote code execution when processing crafted PDFs. ...