Code injection

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller...

CVE-2022-24109

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller...

PT-2023-12743 · Onos · Onos

Name of the Vulnerable Software and Affected Versions: ONOS version 2.5.1 Description: An issue was discovered where a remote attacker can install a duplicate intent with a different key and then remove the duplicate one, resulting in the removal of the flow rules of the intent, even though the...

CVE-2022-24109

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller...

CVE-2022-24109: Uncontrolled Resource Consumption

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller...

CVE-2022-24109

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller...

Open Networking Foundation ONOS Resource Management Vulnerability

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which can be exploited by a remote attacker to...

GHSA-R4XG-4WRV-W72H Duplicate Advisory: Lemur subject to insecure random generation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5fqv-mpj8-h7gm. This link is maintained to preserve external references. Original Description Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The...

Duplicate Advisory: Lemur subject to insecure random generation

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5fqv-mpj8-h7gm. This link is maintained to preserve external references. Original Description Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The...

Stargate-Bukkit security vulnerabilities

Stargate-Bukkit is an original MineCraft portal plugin open-sourced by Stargate Rewritten. A security vulnerability exists in versions prior to Stargate-Bukkit 0.7.9.11, which stems from mishandling of data, resulting in duplicate data and passengers...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle iProcuremen...

WordPress WooCommerce Easy Duplicate Product Plugin <= 0.3.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce Easy Duplicate Product Type Plugin Vulnerable versions = 0.3.0.0 Fixed in 0.3.0.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30747 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3fcae325f207...

CVE-2022-43128

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2022-42245. Reason: This record is a duplicate of CVE-2022-42245. Notes: All CVE users should reference CVE-2022-42245 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2022-43128

CVE-2022-43128 is a duplicate of CVE-2022-42245 and references Dreamer CMS 4.0.01 as vulnerable to SQL Injection. Public PoCs show an SQLi in Dreamer CMS (notably via POST to /admin/search/doSearch and related ArchivesMapper.xml usage) with v4.0.0 demonstrated in external advisories and exploit l...

CVE-2023-1271

Rejected reason: Duplicate. Please use CVE-2023-24421...

Open redirect

Rejected reason: Duplicate. Please use CVE-2023-24421...

PT-2023-16852 · Undefined · Undefined

‼ CVE-2023-1271 ‼ REJECT Duplicate. Please use CVE-2023-24421. 📖 Read via "National Vulnerability Database"...

SUSE CVE-2023-28643

Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares with the same name, while a memory cache is configured, the second share will replace the first one instead of being renamed to name 2. It is recommended that the Nextcloud Server...

Duplicate Advisory: pimcore is vulnerable to cross-site scripting in classes module

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4f25-2x2c-vg6v. This link is maintained to preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...

Duplicate Advisory: Pimcore Cross-site scripting in Predefined Asset Metadata module in Settings

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6qjm-39vh-729w. This link is maintained ot preserve external references. Original Description Cross-site Scripting XSS - Generic in GitHub repository pimcore/pimcore prior to 10.5.20...