CVE-2202-3602

CVE-2022-3602 is an OpenSSL OpenSSL 3.x risk (X.509 certificate verification buffer overrun). It was addressed by fixes in OpenSSL 3.0.7 and is discussed alongside CVE-2022-3786. Microsoft guidance notes that OpenSSL 3.0.x remains affected until patched; affected products include OpenSSL consumer...

CVE-2104-3465

The connected Mageia advisory MGASA-2014-0248 documents CVE-2104-3465 as a NULL pointer dereference in GnuTLS (gnutls_x509_dn_oid_name()) when parsing X.509 certificates with certain OIDs, potentially returning NULL and enabling a buffer overflow on the client during TLS/SSL handshakes, with a se...

CVE-2016-1000247

CVE-2016-1000247 affects mpg123/libmpg123: a flaw in the id3 tag processing code can cause a buffer over-read leading to a denial of service. Debian and Mageia advisories fix it by updating mpg123 packages (e.g., Debian 1.14.4-1+deb7u1). Ubuntu and OSV/NASL entries also reference the vulnerabilit...

CVE-2015-20170

CVE-2015-20170 concerns the mailcap.findmatch() function in Python where the second argument is not sanitized, enabling shell command injection. The CloudLinux update CLSA-2022:1658347112 states that CVE-2015-20170 has been fixed in Python (via a provided update). The connected document does not ...

CVE-2023-02121

Cisco security advisory CISCO-SA-ADEOS-MLAYECVK documents multiple command injection vulnerabilities in the restricted shell of Cisco EPNM, ISE, and Prime Infrastructure. An authenticated, local attacker could escape the restricted shell and gain root privileges on the underlying OS. Updates have...

CVE-2022-20565

CVE-2022-20565 appears in multiple VMware/EulerOS kernel advisories (EulerOS-SA-2023-2184, EulerOS-SA-2023-2252) and in Nessus/OpenVAS feeds as part of Linux kernel issues. The documents indicate a critical vulnerability affecting the Linux kernel’s Cache Handler (exact affected version and produ...

A malicious user can steal a reserved token by using shift() function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens.

Lines of code Vulnerability details Impact A malicious user can steal a reserved token by using shift function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens. Proof of Concept Let's assume the well with WETH and USDC tokens. Currently totalSupply is zer...

CVE-2023-35935

CVE-35935 is a reservation duplicate of CVE-2023-31999. The active vulnerability details concern all versions of @fastify/oauth2 using a statically generated OAuth2 state parameter at startup, reused across requests for all users, enabling CSRF. The issue is fixed in newer releases (e.g., v7.2.0)...

CVE-2023-3327

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-30594

Connected documents describe CVE-2023-30594 as a Grav CMS SSTI bypass vulnerability in the Grav 1.x denylist. Affected: Grav

CVE-2023-30595

CVE-2023-30595 (Grav CMS) involves a server-side template injection in GravExtension.filterFilter() for Grav

CVE-2023-33623

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31478. Reason: This record is a reservation duplicate of CVE-2023-31478. Notes: All CVE users should reference CVE-2023-31478 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-33622

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31475. Reason: This record is a reservation duplicate of CVE-2023-31475. Notes: All CVE users should reference CVE-2023-31475 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2022-32730

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-32726

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-32719

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2020-6599

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

CVE-2023-31554

CVE-2023-31554 is rejected/not used; refer to CVE-2023-2663.

SUSE CVE-2023-2483

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-31554

REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2663. Reason: This record is a reservation duplicate of CVE-2023-2663. Notes: All CVE users should reference CVE-2023-2663 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...