7535 matches found
CVE-2012-6482
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2012-6478
This CVE entry is rejected/not used; it does not represent an active vulnerability.
PT-2020-7306
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7368
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2013. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7292
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7310
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7301
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7299
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7295
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in an unassigned CNA pool during 2012. Recommendations: At the moment, there is no information about a newer version that contain...
PT-2020-7304
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7305
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2012. Recommendations: At the moment, there is no information about a newer versi...
PT-2020-7303
Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate number was rejected due to being in an unassigned CNA pool during 2012. Recommendations: At the moment, there is no information about a newer version that contain...
UBUNTU-CVE-2019-17638
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws an exception to produce an HTTP 431 error. When this happens, the ByteBuffer containing the HTTP response headers is released back to the ByteBufferPool twice. Because of this doub...
PT-2020-4636
Name of the Vulnerable Software and Affected Versions Eclipse Jetty versions 9.4.27.v20200227 through 9.4.29.v20200521 Description The issue is related to the handling of large response headers in Eclipse Jetty, which can lead to a situation where two threads acquire the same ByteBuffer from the...
SUSE SLED15 / SLES15 Security Update : freetds (SUSE-SU-2020:1417-2)
This update for freetds to 1.1.36 fixes the following issues : Security issue fixed : CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed : Enabled Kerberos support Version update ...
SUSE-SU-2020:1417-2 Security update for freetds
This update for freetds to 1.1.36 fixes the following issues: Security issue fixed: - CVE-2019-13508: Fixed a heap overflow that could have been caused by malicious servers sending UDT types over protocol version 5.0 bsc1141132. Non-security issues fixed: - Enabled Kerberos support - Version upda...
Solving Uninitialized Kernel Pool Memory on Windows
This blog post outlines the work that Microsoft is doing to eliminate uninitialized kernel pool memory vulnerabilities from Windows and why we’re on this path. For a background on why uninitialized memory matters and what options have been used in the past to tackle this issue, please see our...
Solving Uninitialized Kernel Pool Memory on Windows
This blog post outlines the work that Microsoft is doing to eliminate uninitialized kernel pool memory vulnerabilities from Windows and why we’re on this path. For a background on why uninitialized memory matters and what options have been used in the past to tackle this issue, please see our...
Solving Uninitialized Kernel Pool Memory on Windows
This blog post outlines the work that Microsoft is doing to eliminate uninitialized kernel pool memory vulnerabilities from Windows and why we’re on this path. For a background on why uninitialized memory matters and what options have been used in the past to tackle this issue, please see our...
GHSA-J823-4QCH-3RGM Deserialization of untrusted data in Jackson Databind
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...