CVE-2021-33914

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2018-10006

Technical details for CVE-2018-10006 are not publicly available in the provided documents. Monitor for updates as more information may be released.

CVE-2021-39120

CVE-2021-39120 affects Atlassian Jira Server/Data Center prior to version 8.18.0. The vulnerability is an information disclosure in the comment notification functionality that allows remote attackers to learn when a restricted comment is removed from an issue. Affected versions are listed as

CVE-2018-18855

CVE-2018-18855 describes a denial-of-service in spray-json (Lightbend Spray) via an uncontrolled recursion in JsonParser during deep nesting. IBM’s bulletin ties this to IBM Cloud APM (Base Private 8.1.4 and Advanced Private 8.1.4). Root cause: JsonParser’s unbounded recursion allows resource exh...

CVE-2022-29299

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-20660. Reason: This candidate is a reservation duplicate of CVE-2021-20660. Notes: All CVE users should reference CVE-2021-20660 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-20136

CVE-2022-20136 is associated with an information disclosure vulnerability in Google Android's RNDIS kernel driver across Android 10–12.x (and prior versions). The connected CNVD entry describes an information disclosure flaw in the RNDIS kernel driver, enabling attackers to obtain user informatio...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2018-15889

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-5783. Reason: This candidate is a reservation duplicate of CVE-2018-5783. Notes: All CVE users should reference CVE-2018-5783 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

GHSA-37WM-28RM-56VW Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name...

Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation

The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the "Jenkins' own user database" setting, which allows remote attackers to gain privileges by creating a reserved name...

CVE-2021-43417

The connected data indicates CVE-2021-43417 corresponds to a Directory Traversal in Nomad, caused by insufficient sanitization of authentication for users with job submission capabilities, enabling bypass of configured allowed paths for images. Affected software/component: Nomad (directory traver...

CVE-2021-43417

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

PT-2022-9739 · Amd · Athlon™ Series +22

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area,...

AMD System Management Unit 权限许可和访问控制问题漏洞

The AMD System Management Unit SMU is a system management unit at AMD in the United States. A security vulnerability exists in the AMD System Management Unit that stems from the possibility that a malicious or compromised UApp or ABL could change the value used by the ASP for its reserved DRAM to...

CVE-2021-26363

A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenced area, potentially leading to data exposure...

Denial Of Service (DoS)

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...

CVE-2021-26094

Fortinet FortiWLC contains a boundary error in the CLI that can trigger a stack-based buffer overflow, allowing a local authenticated user to potentially execute arbitrary code with elevated privileges. Affected FortiWLC versions (per CNNVD) include 8.5.0, 8.5.1, 8.5.2, 8.5.3, and 8.6.0. Fortinet...

GSD-2022-1002482 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.311 by commit...

GSD-2022-1002202 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.189 by commit...

GSD-2022-1002018 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...