ALPINE-CVE-2017-17344

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

CVE-2009-5069

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

CVE-2020-26507

A CSV Injection also known as Formula Injection vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers. By providing formula code in the “Notes” functionality in the main screen, an attacker can inject a payload into th...

CVE-2020-26507

A CSV Injection also known as Formula Injection vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers. By providing formula code in the “Notes” functionality in the main screen, an attacker can inject a payload into th...

PT-2020-16428

Name of the Vulnerable Software and Affected Versions Marmind web application version 4.1.141.0 Description A CSV Injection vulnerability in the Marmind web application allows malicious users to gain remote control of other computers. By providing formula code in the "Notes" functionality, an...

PT-2020-22095

Name of the Vulnerable Software and Affected Versions blosc affected versions not specified Description The issue is related to a heap-buffer-overflow crash. Technical details about the crash include the blosc c and do job functions, as well as the blosc compress context. Recommendations At the...

PT-2020-22070

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves functions such as destroy op array, fuzzer do request, and fuzzer...

PT-2020-22036

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the stbi expand png palette function, which is called by...

QEMU: usb: out-of-bounds r/w access issue while processing usb packets

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU. This issue occurs while processing USB packets from a guest when USBDevice 'setuplen' exceeds its 'databuf4096' in the dotokenin, dotokenout routines. This flaw allows a guest user to crash the QEMU process,...

kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c

A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures...

QEMU: usb: out-of-bounds r/w access issue while processing usb packets

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU. This issue occurs while processing USB packets from a guest when USBDevice 'setuplen' exceeds its 'databuf4096' in the dotokenin, dotokenout routines. This flaw allows a guest user to crash the QEMU process,...

QEMU: usb: out-of-bounds r/w access issue while processing usb packets

An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU. This issue occurs while processing USB packets from a guest when USBDevice 'setuplen' exceeds its 'databuf4096' in the dotokenin, dotokenout routines. This flaw allows a guest user to crash the QEMU process,...

amigosdoforum.com.br Cross Site Scripting vulnerability OBB-1337621

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-15960

Name of the Vulnerable Software and Affected Versions vBulletin version 5.6.3 Description The issue affects the Admin CP in vBulletin, where an XSS attack can be performed via the admincp/search.php?do=dosearch URI. Recommendations For version 5.6.3, consider restricting access to the...

CVE-2020-25120: Improper Neutralization of Input During Web Page Generation

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...

PT-2020-21086

Name of the Vulnerable Software and Affected Versions malicious-do-not-install affected versions not specified Description The issue concerns malicious code in the software that copies sensitive files, specifically /etc/passwd and /etc/shadow, to the local /tmp/ folder. This action compromises...

CVE-2020-25124: Improper Neutralization of Input During Web Page Generation

The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI...

app.academiadocontrabaixo.com.br Cross Site Scripting vulnerability OBB-1296738

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c.

...

UBUNTU-CVE-2020-0255

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10751. Reason: This candidate is a duplicate of CVE-2020-10751. Notes: All CVE users should reference CVE-2020-10751 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...