Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: This ID is frequently used as an example of the 2014 CVE-ID syntax change, which allows more than 4 digits in the sequence number. Notes: See references...

CVE-2014-99999

CVE-2014-99999 entry is rejected/not used and does not represent an active vulnerability.

CVE-2014-100000

CVE-2014-100000 is rejected/not used per the Initial Description.

CVE-2014-456132

CVE-2014-456132 entry is rejected/not used and does not represent an active vulnerability.

Sefrengo CMS 1.6.0 Cross Site Scripting / SQL Injection Vulnerabilities

Sefrengo CMS version 1.6.0 suffers from a cross site scripting and SQL Injection Vulnerabilities Author: Steffen Rösemann Affected Software: CMS Sefrengo v.1.6.0 Release-Date: 18th-Feb-2014 Vendor URL: http://www.sefrengo.org/start/start.html Vendor Status: fixed CVE-ID: -...

e107 2.0 Alpha2 Cross Site Request Forgery Vulnerability

e107 version 2.0 Alpha2 suffers from a cross site request forgery vulnerability. Advisory: CSRF vulnerability in CMS e107 v.2 alpha2 Author: Steffen Rösemann Affected Software: CMS e107 v.2 alpha2 Release-Date: 08th-Jun-2014 Vendor URL: http://e107.org Vendor Status: solved CVE-ID: -...

Security Advisory-Multiple Vulnerabilities on Huawei P2 Smartphone

This security advisory SA describes two vulnerabilities. The decoder driver of P2 was found to allow any application to read or write to an arbitrary memory address. HWPSIRT-2014-0401 This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2014-2273. The Kingsoft...

APPLE-SA-2014-10-16-3 OS X Server v4.0

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-10-16-3 OS X Server v4.0 OS X Server v4.0 is now available and addresses the following: BIND Available for: OS X Yosemite v10.10 or later Impact: Multiple vulnerabilities in BIND, the most serious of which may lead to a denial of service...

Broken shell ShellShock）vulnerability sample analysis report-vulnerability warning-the black bar safety net

A. Vulnerability events 1. Vulnerability information ●Release time:2014-09-25 1 4 4 8 minutes 0 4 seconds ●CVE ID:CVE-2 0 1 4-6 2 7 1 ●The affected version: ! 2. Vulnerability overview BashGNU Bourne-Again Shellis the most Linux systems and Mac OS X v10. 4 The default shell, it can run on most...

[SECURITY] [DSA 3001-1] wordpress security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3001-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso August 09, 2014 http://www.debian.org/security/faq -...

Kerio Control 8.3.1 - Blind SQL Injection

Kerio Control 8.3.1 - Blind SQL Injection Document Title: ====================== Kerio Control = 8.3.1 Boolean-based blind SQL Injection Primary Informations: ====================== Product Name: Kerio Control Software Description: Kerio Control brings together multiple capabilities including a...

Linux Kernel 2.6.x Sysctl Unregistration Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15365/info Linux Kernel is reported prone to a local denial-of-service vulnerability. This issue arises from a failure to properly unregister kernel resources when network devices are removed. This issue allows local...

Mac OS X < 2007-005 - (vpnd) Local Privilege Escalation Exploit

Copyright c 2007 Kevin Finisterre kflists at digitalmunition.com CVE-ID: CVE-2007-0753 - http://docs.info.apple.com/article.html?artnum=305530 http://www.exploit-db.com/sploits/05302007-vpenis.tar.gz milw0rm.com 2007-05-30...

Linux Kernel 2.6.x - IPV6 Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15156/info Linux Kernel is reported prone to a local denial-of-service vulnerability. This issue arises from an infinite loop when binding IPv6 UDP ports. / Linux kernel IPv6 UDP port selection infinite loop local denial ...

CVE-2012-5583

phpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

CVE-2014-3967

The HVMOPinjectmsi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service NULL pointer dereference and crash via unspecified vectors...

[oss-security] libgadu vulnerability: possible memory corruption

I'd like to request a CVE ID for the following issue: A crafted message from the file relay server may cause memory to beoverwritten. The memory is not overwritten with data sent directly by the server, but security implications cannot be ruled out. The bug is public:...

HP Universal Configuration Management Database远程代码执行漏洞

Bugtraq ID:66962 CVE ID:CVE-2013-6214 HP Universal Configuration Management Database是惠普公司的统一配置管理数据库应用。 HP Universal Configuration Management Database存在一个未明安全漏洞，允许远程攻击者利用漏洞获取敏感信息。 0 HP Universal Configuration Management Database Integration Service v9.05 HP Universal Configuration Management...

IBM AIX OpenSSL TLS心跳信息泄漏漏洞

CVE ID:CVE-2014-0160 IBM AIX是一款商业性质的操作系统。 IBM AIX所绑定的OpenSSL存在安全漏洞，OpenSSL处理TLS”心跳“扩展存在一个边界错误，允许攻击者利用漏洞获取64k大小的已链接客户端或服务器的内存内容。内存信息可包括私钥，用户名密码等。 0 IBM AIX 6.x IBM AIX 7.x 用户可参考如下厂商提供的安全补丁以修复该漏洞： http://aix.software.ibm.com/aix/efixes/security/openssladvisory7.doc...