CVE-2018-1000066

This CVE-2018-1000066 entry is rejected/not used and does not represent an active vulnerability.

CVE-2017-1000441

CVE-2017-14931 describes a denial-of-service vulnerability in OpenExif 2.1.4: ExifImageFileRead.cpp::readDQT allows remote attackers to trigger a stack-based buffer over-read and crash a vulnerable OpenExif-based application via a crafted JPEG file. This CVE-2017-1000441 was a reservation duplica...

Code Execution Vulnerability in ForceControl

ForceControl is the configuration software developed by ForceControl Technology for the general monitoring and control configuration software market. As the basic platform software in industrial automation software, ForceControl can provide solutions for all kinds of industries. A code execution...

UBUNTU-CVE-2017-1000384

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Restoring GPT Disk to Incompatible Legacy BIOS System

Challenge After selecting a restore point during the bare metal restore configuration, the following message pops up: OS disk in backup uses GPT disk. This may cause boot issues on BIOS systems. If this is ignored and the restore process completes, the following may happen when the restored machi...

CVE-2017-5716

Summary: ConnMan contains a stack-based buffer overflow in the DNS proxy (dnsproxy.c) that can be exploited by crafted DNS responses to cause a denial of service or remote code execution. This vulnerability has CVEs linked to CVE-2017-12865 and CVE-2017-5716, with public advisories noting remote ...

CVE-2017-1000179

CVE-2017-1000179 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

gtk-vnc security, bug fix, and enhancement update

0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...

puerres-narino.gov.co XSS vulnerability

Open Bug Bounty ID: OBB-269742 Description| Value ---|--- Affected Website:| puerres-narino.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2012-2382

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1930. Reason: This candidate is a reservation duplicate of CVE-2011-1930. Notes: All CVE users should reference CVE-2011-1930 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2011-4365

CVE-2011-4365 is a reservation/duplicate of CVE-2011-4090. Connected sources describe CVE-2011-4090 as an XSS vulnerability in Serendipity before v1.6 (karma plugin) that may enable privilege escalation. Affected software: Serendipity CMS with the karma plugin prior to 1.6. Root cause: XSS leadin...

CVE-2016-1000361

CVE-2016-1000361 is a reservation/duplicate of CVE-2016-9848 for phpMyAdmin. The connected records confirm the underlying issue: in phpMyAdmin, phpinfo (phpinfo.php) exposes values of HttpOnly cookies, affecting all 4.6.x versions prior to 4.6.5, all 4.4.x versions prior to 4.4.15.9, and all 4.0....

CVE-2016-1000367

CVE-2016-1000367 is rejected and not an active vulnerability entry; reference CVE-2016-9858/9859/9860.

CVE-2016-1000373

CVE-2016-9866 concerns phpMyAdmin and describes that when the arg_separator is not the default “&”, the CSRF token is not properly stripped from the return URL of the preference import action. Affected releases include 4.6.x prior to 4.6.5, 4.4.x prior to 4.4.15.9, and 4.0.x prior to 4.0.10.18. T...

CVE-2016-1000365

CVE-2016-1000365 is rejected and not used as a candidate.

CVE-2017-2322

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an authenticated user to cause widespread denials of service to system services by consuming TCP and UDP ports which are normally reserved for other system...

Windows Update for reserved devices in Windows 8.1 or Windows 7 SP1

Windows Update for reserved devices in Windows 8.1 or Windows 7 SP1 About this update This update applies to some reserved devices that are upgrading to Windows 10 from Windows 8.1 or Windows 7 Service Pack 1 SP1. Before you install this update, see the Prerequisites section. How to get this upda...

Update Rollup 3 for Windows Server 2012 Essentials

Update Rollup 3 for Windows Server 2012 Essentials Introduction This article lists the issues that are fixed in Update Rollup 3 for Windows Server 2012 Essentials. Important This update rollup contains server-side fixes. After you apply this update rollup, the client-side package is installed...

Palo Alto Networks PAN-OS 7.0.x < 7.0.12 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x prior to 7.0.12. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when processing IPv6 traffic matching a predict session. An unauthenticated, remote attacker can exploi...

CVE-2016-6895

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5333. Reason: This candidate is a reservation duplicate of CVE-2016-5333. Notes: All CVE users should reference CVE-2016-5333 instead of this candidate. All references and descriptions in this candidate have been removed to...