Design/Logic Flaw

Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...

UBUNTU-CVE-2023-4205

Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...

CVE-2023-4205

CVE-2023-4205 entry is rejected/not used; not an active vulnerability.

How Qualys Drives PCI DSS 4.0 Compliance for File Integrity Monitoring

The Payment Card Industry Data Security Standard PCI DSS is a well-known rule for compliance by merchants and entities involved in payment card processing. The new PCI DSS 4.0 standard specifies a broad range of technical and process requirements to ensure the safety of payment cardholder data or...

CVE-2023-0030

A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkmvmatail function to fail. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2022-3857

Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...

UBUNTU-CVE-2022-3857

Rejected reason: Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...

APKHunt - Comprehensive Static Code Analysis Tool For Android Apps That Is Based On The OWASP MASVS Framework

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security testers, it can be used by anyone to identify and address potential security vulnerabilities in their cod...

Uncontrolled Resource Consumption

This advisory has been marked as a false positive...

CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

CVE-2023-23919

A cryptographic vulnerability exists in Node.js 19.2.0, 18.14.1, 16.19.1, 14.21.3 that in some cases did does not clear the OpenSSL error stack after operations that may set it. This may lead to false positive errors during subsequent cryptographic operations that happen to be on the same thread...

SUSE CVE-2018-13420

Google gperftools 2.7 has a memory leak in mallocextension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer program...

SUSE CVE-2022-3857

Maintainer contacted. This is a false-positive. The flaw does not actually exist and was erroneously tested...

Introducing Quarantine for Cloud Storage Scanning in Nebula

Were excited to announce Quarantine for Malwarebytes Cloud Storage Scanning CSS, a new feature which allows you to automatically quarantine threats found in your cloud storage repositories. Malwarebytes Cloud Storage Scanning is an add-on service in Nebula that scans for malware on cloud storage...

CVE-2022-41836

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

Code injection

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

CVE-2022-41836

CVE-2022-41836 is a vulnerability in BIG-IP Advanced WAF and ASM where, if a security policy uses the Attack Signature False Positive Mode, undisclosed requests can cause the bd process to terminate, enabling a network DoS. The advisory (K47204506) lists vulnerable branches and fixes: BIG-IP 17.x...

CVE-2022-41836 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 Corporation that integrates network traffic management, application security management, load balancing and other features. The F5 BIG-IP suffers from an input validation error vulnerability that originates from an undisclosed request that cou...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM bd vulnerability (K47204506)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.7 / 16.1.3.1 / 17.0.0.1 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K47204506 advisory. - When an 'Attack Signature False Positive Mode' enabled security policy is configured on a...