CVE-2021-0792

Android 12 Security Release Notes enumerate CVE-2021-0792 in the System group as an Information Disclosure (Type: ID) vulnerability with Android bug ID A-180938364 and a Moderate severity. The document does not provide exploitable details, affected subcomponents beyond the System classification, ...

CVE-2021-0745

CVE-2021-0745 is listed in Android 12 release notes under System with type ID (information disclosure) and severity Moderate, referenced by Android bug ID A-187709482. The bulletin notes that issues fixed in Android 12 are addressed when devices run Android 12 with a patched level, and that sourc...

CVE-2021-0737

CVE-2021-0737 is listed under Android 12, Framework, with a vulnerability type of Elevation of Privilege (EoP) and a High severity rating. The Android 12 security release notes enumerate this CVE among issues fixed as part of the Android 12 update, indicating that affected devices with Android 12...

CVE-2021-0715

CVE-2021-0715 appears in the Android 12 vulnerability set provided by the Android release notes, listed under the Framework component with Android bug ID A-193032972 and categorized as ID (information disclosure) with Moderate severity. The document does not supply additional technical details (a...

CVE-2018-1689

CVE-2018-1689 is an IBM Jazz Foundation cross-site scripting (XSS) vulnerability affecting IBM CLM/Rational products that use Jazz technology. The IBM bulletin enumerates affected suites (e.g., CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM, etc.) and lists CVE-2018-1689 as a vulnerability where ...

CVE-2020-26691

IBM’s bulletin for IBM Rational Build Forge 8.0.x lists CVE-2020-26691 as one of several vulnerabilities affecting Build Forge 8.0–8.0.0.20. The connected document provides remediation: upgrade to IBM Rational Build Forge 8.0.0.21, which includes Apache HTTP Server 2.4.52. The description for CVE...

Denial Of Service(DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2019-17591

Bolt CMS 3.x contains a CSRF vulnerability (CVE-2019-17591) demonstrated by public exploits targeting Bolt CMS 3.6.10. The exploit describes an authenticated user CSRF payload that posts to /index.php/async/folder/create to perform actions on behalf of the user. Connected sources show CSRF risk i...

CVE-2019-9887

The connected VERACODE entry describes a Cross-site Scripting (XSS) issue in the johnpbloch/wordpress package, caused by a flawed sanitization path where wp_filter_post_kses is used instead of wp_filter_kses. This allows HTML tags to pass through and be interpreted by the browser. The document do...

CVE-2020-17455

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

Cross-Site Scripting (XSS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-41741

CVE-2021-41741 is addressed in the openSUSE/OpenSSL Nextcloud updates. The issue is described as high memory usage when generating a preview for a broken image in Nextcloud Server. Affected software is Nextcloud Server (self-hosted cloud platform); the root cause is related to image preview handl...

CVE-2021-36814

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2021-33517

CVE-2021-33517 and CVE-2021-36090 are vulnerabilities in Apache Commons Compress that affect IBM WebSphere Liberty (and WebSphere Liberty-based bundles) used in IBM Cloud Pak for Applications and IBM WebSphere Application Server families. The issues cause denial of service through memory-related ...

CVE-2018-1960

The MaaS360 iOS Application (versions

CVE-2012-0424

Technical details for CVE-2012-0424 are not provided in the supplied documents; the Initial Description is a placeholder. Monitor for updates from the sources.

CVE-2020-6925

HP Device Manager is affected on 4.x before 4.7 SP13 or 5.x before 5.0.4. CVE-2020-6925 describes a weak cipher susceptible to dictionary attacks in the device-manager component. The HP advisory and Rapid7 analysis indicate that chained CVEs (6925/6926/6927) can lead to unauthenticated remote acc...

CVE-2021-0846

Technical details for CVE-2021-0846 are not publicly available in the provided documents. No affected products, root cause, or impact are specified. Monitor for updates.

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

UBUNTU-CVE-2019-1010222

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19801. Reason: This candidate is a reservation duplicate of CVE-2018-19801. Notes: All CVE users should reference CVE-2018-19801 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...