1833 matches found
CVE-2020-8389
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8381
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8375
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8370
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8368
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8360
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8367
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
CVE-2020-8372
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...
PT-2022-21938 · U-Boot +5 · U-Boot +5
Name of the Vulnerable Software and Affected Versions: U-Boot versions from v2020.10-rc2 to v2022.07-rc5 Description: The squashfs filesystem implementation in U-Boot contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. This can be triggered by...
CVE-2021-20200
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
The vulnerability of the DoWrite method implementation in the Node.js software platform allows a perpetrator to trigger a service failure or cause other adverse effects.
The vulnerability of the DoWrite method implementation in the Node.js software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects from a remote perspective...
CVE-2020-23262
An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do...
Ming-soft Mcms SQL Injection Vulnerability
A SQL injection vulnerability exists in Ming-soft Mcms version 5.0. An attacker can exploit the SQL injection without logging in via /mcms/view.do...
CVE-2019-11303
CVE-2019-11303 entry is rejected/not used; does not represent an active vulnerability.
CVE-2020-28290
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2020-28476
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-23336. Reason: This candidate is a reservation duplicate of CVE-2021-23336. Notes: All CVE users should reference CVE-2021-23336 instead of this candidate. All references and descriptions in this candidate have been removed t...
OSV-2018-160 Heap-buffer-overflow in do_uncompress_block
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11011 Crash type: Heap-buffer-overflow WRITE 1 Crash state: douncompressblock processblock douncompressfile...
The vulnerability of the do_cgi() function in D-Link DSL-2640B router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the docgi function in D-Link DSL-2640B router software arises due to an overflow in the stack buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...