SUSE-SU-2017:3311-1 Security update for slurm

This update for slurm fixes the following issues: Slurm was updated to 17.02.9 to fix a security bug, bringing new features and bugfixes fate323998 bsc1067580. Security issue fixed: CVE-2017-15566: Fix security issue in Prolog and Epilog by always prepending SPANK to all user-set environment...

JVN#78501037: Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection

A-Member and A-Reserve provided by ARK-Web co., ltd. are plugins for Movable Type which provide functions to build a membership website or a reservation website. A-Member and A-Reserve contain SQL injection CWE-89 vulnerability due to the issue in processing cookie values. Impact An attacker who...

CVE-2017-1000204

CVE-2017-1000204 is rejected; this candidate is a reservation duplicate of CVE-2016-9920 and not an active vulnerability entry.

CVE-2017-1000233

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session. Affected versions: prior to 6.1.6 and prior to 7.0.3. Remediation: upgrade to OpenProject 6.1.6 or newer, or 7.0.3 or new...

CVE-2017-13826

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-10140. Reason: This candidate is a reservation duplicate of CVE-2017-10140. Notes: All CVE users should reference CVE-2017-10140 instead of this candidate. All references and descriptions in this candidate have been removed t...

Why cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"

Cache Type = "Cache on device hard disk" The block reservation of "Cache on device hard disk" is ONLY 4KB, and it's random I/O. Cache Type = "Cache on device RAM with overflow on hard disk" Since "overflow on hard disk" is vhdx format, the block reservation is 2MB & required for sequential I/O,...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4003. Reason: This candidate is a reservation duplicate of CVE-2016-4003. Notes: All CVE users should reference CVE-2016-4003 instead of this candidate. All references and descriptions in this candidate have been removed to...

DEBIAN-CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

Tcpdump RSVP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RSVP parser is one of the resource reservation protocol parsers. A...

ICHotelReservation 3.3 - 'key' SQL Injection

Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo: http://icloudcenter.net/demos/ichotelreservation/ Version: 3.3 Category:...

Hotel Reservation Site Script 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

ICHotelReservation 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

UBUNTU-CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

PT-2017-12891

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

CVE-2017-1000162

CVE-2017-1000162 is rejected and not used; reference CVE-2017-12474/12475/12476.

CVE-2017-1000205

CVE-2017-1000205 is rejected; reference CVE-2017-9091 instead.

CVE-2017-1000202

CVE-2017-1000202 is a reserved/duplicate entry; refer to CVE-2017-12933.

CVE-2017-1000123

CVE-2017-1000123 is a reservation duplicate of CVE-2017-12425. Connected records provide concrete details for CVE-2017-12425: a denial-of-service vulnerability in Varnish (Varnish Cache) caused by a faulty if statement in varnishd that can trigger an assertion when processing invalid client reque...

CVE-2017-1000216

CVE-2017-1000216 is a reservation duplicate of CVE-2017-11104 and should reference CVE-2017-11104. The active vulnerability is CVE-2017-11104 in Knot DNS: versions 2.4.x prior to 2.4.5 and 2.5.x prior to 2.5.2 contain a TSIG authentication bypass due to an improper TSIG validity period check. Exp...