CVE-2020-10370

Certain Cypress (and Broadcom) Wireless Combo chips , specifically the CYW43455 , are vulnerable to a Bluetooth outage via a "Spectra" attack . This issue occurs when the 2021-01-26 Bluetooth firmware update is missing. Documentation indicates that this is an unpatched vulnerability where the ven...

CVE-2023-1973

CVE-2023-1973 is an Undertow vulnerability that allows a remote attacker to cause a Denial of Service by exploiting FormAuthenticationMechanism, leading to OutOfMemory on the server. The connected records (e.g., Red Hat RHSA-2025-9583) confirm this issue and indicate remediation via security upda...

PT-2024-34134 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned as affected. Description: The provided information does not contain details about a specific vulnerability. It appears to be a rejection notice for a CVE candidate number, indicating that the...

CVE-2024-31880

CVE-2024-31880 : IBM Db2 for Linux, UNIX and Windows (incl. Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to DoS under certain configurations when authenticated users send a crafted SQL statement, potentially crashing the server. Connected IBM bulletins/CPD advisories tie this set to IBM Db2...

PT-2024-32281 · Apache · Apache

Name of the Vulnerable Software and Affected Versions: Apache affected versions not specified Description: The issue concerns an unvetted reference leak. No specific details about the issue are available due to the candidate number being issued in error. Recommendations: At the moment, there is n...

UBUNTU-CVE-2024-49215

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-49294. Reason: This candidate is a reservation duplicate of CVE-2023-49294. Notes: All CVE users should reference CVE-2023-49294 instead of this candidate. All references and descriptions in this candidate have been removed t...

OESA-2024-2276 libyaml security update

$summary. Security Fixes: Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The maintainer identified an error in the libyaml fuzzers. It is not possibl...

CVE-2023-32194

CVE-2023-32194 affects Rancher. The vulnerability arises when granting a create or * global role for the resource type "namespaces" across any API group, inadvertently giving the subject edit permissions on core namespaces and enabling access to create, update, or delete namespaces in a project. ...

PT-2024-28944 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially reported but further investigation showed it was not a security issue. The candidate was withdrawn by its CNA. Recommendations: At the moment, there i...

CVE-2024-32608

The CVE-2024-32608 entry applies to the HDF5 library up to version 1.14.3, where memory corruption in H5A__close can corrupt the instruction pointer and lead to denial of service or potential code execution. Public references indicate a fix in HDF5 1.14.4, so upgrading to 1.14.4 or later mitigate...

CVE-2024-9168

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2024-31570

CVE-2024-31570 affects libfreeimage in FreeImage 3.4.0 through 3.18.0, where a stack-based buffer overflow occurs in PluginXPM.cpp Load when processing XPM files. The issue is triggered by a crafted XPM input and is rated critical (CVSS v3.1: 9.8, NETWORK, LOW complexity, no user interaction). Af...

CVE-2023-30583

fs.openAsBlob can bypass the experimental permission model when using the file system read restriction with the --allow-fs-read flag in Node.js 20. This flaw arises from a missing check in the fs.openAsBlob API. Please note that at the time this CVE was issued, the permission model is an...

CVE-2024-45742

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45730

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45729

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45727

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45725

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45724

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

PT-2024-11677 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A candidate vulnerability was issued in error and is not a valid vulnerability. All references and descriptions have been removed to prevent accidental usage. Recommendations...