PT-2024-34134 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a CVE candidate number, indicating that the...

CVE-2024-31880

CVE-2024-31880 : IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to DoS under certain configurations when authenticated users send a crafted SQL statement, potentially crashing the server. Connected IBM bulletins/CPD advisories tie this set to IBM Db2...

PT-2024-32281 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache affected versions not specified Description: The issue concerns an unvetted reference leak. No specific details about the issue are available due to the candidate number being issued in error. Recommendations: At the moment, there is n...

UBUNTU-CVE-2024-49215

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-49294. Reason: This candidate is a reservation duplicate of CVE-2023-49294. Notes: All CVE users should reference CVE-2023-49294 instead of this candidate. All references and descriptions in this candidate have been removed t...

OESA-2024-2276 libyaml security update

$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...

CVE-2023-32194

CVE-2023-32194 affects Rancher. The vulnerability arises when granting a create or * global role for the resource type "namespaces" across any API group, inadvertently giving the subject edit permissions on core namespaces and enabling access to create, update, or delete namespaces in a project. ...

PT-2024-28944 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially reported but further investigation showed it was not a security issue. The candidate was withdrawn by its CNA. Recommendations: At the moment, there i...

CVE-2024-32608

The CVE-2024-32608 entry applies to the HDF5 library up to version 1.14.3, where memory corruption in H5A__close can corrupt the instruction pointer and lead to denial of service or potential code execution. Public references indicate a fix in HDF5 1.14.4, so upgrading to 1.14.4 or later mitigate...

CVE-2024-9168

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-31570

CVE-2024-31570 affects libfreeimage in FreeImage 3.4.0 through 3.18.0, where a stack-based buffer overflow occurs in PluginXPM.cpp Load when processing XPM files. The issue is triggered by a crafted XPM input and is rated critical (CVSS v3.1: 9.8, NETWORK, LOW complexity, no user interaction). Af...

CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

CVE-2024-45742

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45730

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45729

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45727

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45725

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45724

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

PT-2024-11677 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate vulnerability was issued in error and is not a valid vulnerability. All references and descriptions have been removed to prevent accidental usage. Recommendations...

PT-2024-11696 · Adobe · Reader

Name of the Vulnerable Software and Affected Versions: Adobe Reader affected versions not specified Description: The issue concerns a heap buffer overflow. However, the provided information indicates that the candidate number was issued in error and is not a valid vulnerability. Therefore, there...

SUSE CVE-2024-6597

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided...