GHSA-7GC6-QH9X-W6H8 Withdrawn Advisory: Incorrect Authorization in cross-fetch

Withdrawn Advisory This advisory has been withdrawn because the vulnerability originates from a dependency. For more information, see the Maintainer comments in https://huntr.com/bounties/ab55dfdd-2a60-437a-a832-e3efe3d264ac. Original Description When fetching a remote url with Cookie if it get...

CVE-2022-29268

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

编号撤回

This CVE number has been withdrawn...

CVE-2022-28396

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-39795

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: Pulled from Android ASB2022-04 publication https://source.android.com/security/bulletin/2022-04-01 due to a functional regression. We will re-release this CVE at a future date, in a future...

CVE-2022-28396

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2021-39795

CVE-2021-39795 is documented in connection with Android’s MediaProvider vulnerability. The connected materials describe a privilege-escalation scenario arising from a missing permission check in MediaProvider.java that could let an attacker access or modify other applications’ external storage di...

编号撤回

This CVE number has been withdrawn...

CVE-2022-27149

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-43149

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-43503

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

UBUNTU-CVE-2021-43503

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-43503

CVE-2021-43503 is linked to a Remote Code Execution vulnerability in Laravel via an unserialize pop chain. Affected components were described as targeting Laravel with an exploit path through a deserialization chain involving (1) Routing\PendingResourceRegistration.php (__destruct), (2) Queue\Cap...

PT-2022-11859 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: laravel version 5.8.38 Description: A Remote Code Execution issue exists via an unserialize pop chain in certain functions, including destruct in RoutingPendingResourceRegistration.php, call in QueueCapsuleManager.php, and invoke in...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

CVE-2022-27306

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-27306

This CVE entry is rejected/not used; the candidate was withdrawn and does not represent an active vulnerability.

CVE-2021-46443

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-46443

CVE-2021-46443 corresponds to Caida Spoofer 1.4.6, where a local privilege escalation exists due to an unquoted service path in the spoofer-scheduler service running as SYSTEM. Proof shows an attacker can place a malicious executable in the service path to gain elevated privileges; remediation de...