Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5616

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6664. Reason: This candidate is a reservation duplicate of CVE-2016-6664. Notes: All CVE users should reference CVE-2016-6664 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-6663. Reason: This candidate is a reservation duplicate of CVE-2016-6663. Notes: All CVE users should reference CVE-2016-6663 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5616

CVE-2016-5616 describes a race condition in MySQL’s MyISAM table repair process. If an attacker has shell access to the server running mysqld, they could exploit the race to change permissions on arbitrary files writable by the mysql system user, potentially gaining privilege escalation. The vuln...

seatme.nl XSS vulnerability

Vulnerable URL: https://www.seatme.nl/directreserveren/zoekrestaurants.htm?fhlocation=//seatme/nlNL/date20161025;30000101/numpersonsa2/mammam1110;mam1140;mam1170;mam1200;mam1230;mam1260;mam1/$s=\u003Cimg\u0020src\u003Dx\u0020onerror\u003Dprompt\u0028\u0027OPENBUGBOUNTY\u0027\u0029\u003E Details:...

Threat Outbreak Alert RuleID25196: Email Messages Distributing Malicious Software on September 26, 2016

Medium Alert ID: 49042 First Published: 2016 September 26 18:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25196 may contain the following files: Name ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5333. Reason: This candidate is a reservation duplicate of CVE-2016-5333. Notes: All CVE users should reference CVE-2016-5333 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-6895

CVE-2016-6895 is a reservation duplicate of CVE-2016-5333 and refers to the same issue described for VMware Photon OS OVA 1.0. CVE-2016-5333 states that VMware Photon OS OVA 1.0 released prior to 2016-08-14 contained a default public SSH key in an authorized_keys file, enabling remote attackers t...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4993. Reason: This candidate is a reservation duplicate of CVE-2016-4993. Notes: All CVE users should reference CVE-2016-4993 instead of this candidate. All references and descriptions in this candidate have been removed to...

WordPress Plugin Booking Calendar 6.2 - SQL Injection

WordPress Plugin Booking Calendar 6.2 - SQL Injection SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...

WordPress Booking Calendar 6.2 Plugin - SQL Injection

Exploit for php platform in category web applications SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected...

WordPress Plugin Booking Calendar 6.2 - SQL Injection

SQL injection vulnerability in Booking Calendar WordPress Plugin Abstract An SQL injection vulnerability exists in the Booking Calendar WordPress plugin. This vulnerability allows an attacker to view data from the database. The affected parameter is not properly sanitized or protected with an...

CVE-2016-4619

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-8317. Reason: This candidate is a reservation duplicate of CVE-2015-8317. Notes: All CVE users should reference CVE-2015-8317 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-8317. Reason: This candidate is a reservation duplicate of CVE-2015-8317. Notes: All CVE users should reference CVE-2015-8317 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-4619

CVE-2016-4619 is rejected; refer to CVE-2015-8317 instead.

Hotels.com – Hotel Reservation - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hotels.com – Hotel Reservation published at the 'play' market has multiple vulnerabilities...

CVE-2016-1000025

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10542. Reason: This candidate is a reservation duplicate of CVE-2016-10542. Notes: All CVE users should reference CVE-2016-10542 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2014-9797

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0974. Reason: This candidate is a reservation duplicate of CVE-2014-0974. Notes: All CVE users should reference CVE-2014-0974 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0196. Reason: This candidate is a reservation duplicate of CVE-2014-0196. Notes: All CVE users should reference CVE-2014-0196 instead of this candidate. All references and descriptions in this candidate have been removed to...