6218 matches found
CVE-2023-34451 CometBFT may duplicate transactions in the mempool's data structures
CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...
PT-2023-24887 Ā· Cometbft Ā· Cometbft
Name of the Vulnerable Software and Affected Versions: CometBFT versions v0.34.28 and prior, v0.37.0, v0.37.1 Description: The mempool in CometBFT maintains two data structures, a list and a map, to track outstanding transactions. These data structures are supposed to be in sync, with the map...
CVE-2023-3117
Rejected reason: Duplicate of CVE-2023-3390...
CVE-2023-3117
Duplicate of CVE-2023-3390...
CVE-2023-3117
Rejected reason: Duplicate of CVE-2023-3390...
Open redirect
Rejected reason: Duplicate of CVE-2023-3390...
UBUNTU-CVE-2023-3117
Rejected reason: Duplicate of CVE-2023-3390...
CVE-2023-3117
CVE-2023-3117 is a duplicate of CVE-2023-3390. The connected advisories describe CVE-2023-3390 as a use-after-free vulnerability in the Linux kernel nf_tables/nf_tables_api.c (netfilter) involving NFT_MSG_NEWRULE, enabling local privilege escalation in systems with CAP_NET_ADMIN. Remediation in t...
Duplicate Transactions
code.vegaprotocol.io/vega is vulnerable to Duplicate Transactions. The vulnerability allows an attacker to trick a validator node into processing duplicate transactions, resulting in 50x deposit amount...
CVE-2023-3327
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
PT-2023-24254
ā¼ CVE-2023-3327 ā¼ REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been...
WordPress Duplicate Post Page Menu & Custom Post Type Plugin <= 2.4.1 is vulnerable to Broken Access Control
Software Duplicate Post Page Menu & Custom Post Type Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36526 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID be002a065247 Credits...
CVE-2023-35170
Rejected reason: This CVE is a duplicate of another CVE...
Open redirect
Rejected reason: This CVE is a duplicate of another CVE...
CVE-2023-35170
CVE-2023-35170 is a duplicate entry for Sliver Cryptography issue described across multiple sources. The connected data identifies affected software: Sliver up to version 1.5.39, with improper cryptographic implementation enabling a Man-in-the-Middle (MitM) attack on implants when an attacker can...
CVE-2020-23064
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2020-23066
Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...
UBUNTU-CVE-2020-23064
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
UBUNTU-CVE-2020-23066
REJECT DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...
