Design/Logic Flaw

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2017-18394

CVE-2017-18394 affects cPanel prior to 68.0.15, where the reserved usernames list is insufficient (SEC-327). The Red Hat entry repeats the same description. No further technical details (vulnerable component, exploit specifics, affected products beyond cPanel, or concrete remediation/patch versio...

The vulnerability of the JunOS operating system, related to security configuration errors, allows attackers to compromise the integrity of protected information.

The vulnerability of the JunOS operating system is related to security configuration errors due to reserved multicast addresses like 224.0.0.x not being correctly aligned with addresses like 224.x.x.x. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected...

Servicing stack update for Windows 10, Version 1903: July 26, 2019

None None...

UBUNTU-CVE-2019-1010223

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19800. Reason: This candidate is a reservation duplicate of CVE-2018-19800. Notes: All CVE users should reference CVE-2018-19800 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2019-1010224

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2019-1010222

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19801. Reason: This candidate is a reservation duplicate of CVE-2018-19801. Notes: All CVE users should reference CVE-2018-19801 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2002-0390

This CVE entry is rejected/not used; reference CVE-2002-0639 instead.

CVE-2019-1010262

CVE-2019-1010262 concerns Scapy. A vulnerability in Scapy 2.4.0 and earlier allows Denial of Service via a crafted RADIUS attribute list field, causing an infinite loop and excessive resource use when processing packets over the network or from a pcap. The issue stems from the _RADIUSAttrPacketLi...

CVE-2019-1010042

CVE-2019-1010042 is a reservation duplicate of CVE-2018-7662. The connected documents describe CouchCMS

CVE-2019-1010312

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-11942

Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure an...

CVE-2018-11942

Failure to initialize the reserved memory which is sent to the firmware might lead to exposure of 1 byte of uninitialized kernel SKB memory to FW in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure an...

GHSA-JGMR-WRWX-MGFJ Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ?startingWith?, ?endingWith? or ?containing? could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ?startingWith?, ?endingWith? or ?containing? could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

Input validation

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...

Privilege Escalation

jenkins is vulnerable to privilege escalation. Access to reserved names are not restricted in the HudsonPrivateSecurityRealm class when using jenkins' user database, which allows remote attackers to gain privileges by creating a reserved name...

CVE-2019-3892

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11599. Reason: This candidate is a reservation duplicate of CVE-2019-11599. Notes: All CVE users should reference CVE-2019-11599 instead of this candidate. All references and descriptions in this candidate have been removed t...

Information Disclosure

spring-data-jpa is vulnerable to information disclosure. Derived queries using any of the predicates startingWith, endingWith or containing could return more results than anticipated when a maliciously crafted query parameter value is supplied. LIKE expressions in manually defined queries could...

CVE-2019-3797

This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE...