Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2020-35194

CVE-2020-35194 is a reservation duplicate of CVE-2019-5021. Connected docs show that CVE-2019-5021 affects Alpine Linux Docker images since v3.3, introducing a NULL root password due to a regression (Dec 2015). Impact: remote authentication bypass on affected containers. Remediation: upgrade to n...

UBUNTU-CVE-2020-25707

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-28916...

CVE-2020-25707

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-2891...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate is a duplicate of CVE-2020-2891...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

NewStart CGSL CORE 5.04 / MAIN 5.04 : cups Multiple Vulnerabilities (NS-SA-2020-0067)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has cups packages installed that are affected by multiple vulnerabilities: - In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions. CVE-2018-4180, CVE-2018-418...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29136. Reason: This candidate is a reservation duplicate of CVE-2020-29136. Notes: All CVE users should reference CVE-2020-29136 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2020-27641

CVE-2020-27641 is a reservation duplicate of CVE-2020-29136; all references/descriptions for this candidate were removed to prevent usage. Connected documents (e.g., CVE-2020-29136) describe a brute-force 2FA bypass in cPanel before 90.0.17.

Published application launches twice when application clicked only once

When launching a published application through Internet Explorer, the published application starts twice when the application was clicked only once. The first instance will be successful and then wfshell calls another instance of the application...

HackerOne: Second-order SOQL injection through email and campaign name parameter in Salesforce lead submission

The HackerOne directory contains profiles of bug bounty and vulnerability disclosure programs that aren't managed on HackerOne. These profiles can be claimed by the organization that manages it. As part of this flow, they will need to enter an email address to confirm that affiliation with the...

The vulnerability of Eclipse Jetty servlet containers, related to duplicate resource operations, allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-27708. Reason: This candidate is a reservation duplicate of ID. Notes: All CVE users should reference CVE-2020-27708 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2020-16091

CVE-2020-16091 is a reservation duplicate of CVE-2020-27708. Connected records describe a vulnerability in the Origin Client that could allow a non-administrative user to elevate privileges to Administrator or System, enabling control of the system. There are no vendor/version specifics or remedi...

CVE-2020-27165

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation duplicate of CVE-2020-28050. Notes: All CVE users should reference CVE-2020-28050 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-28050. Reason: This candidate is a reservation duplicate of CVE-2020-28050. Notes: All CVE users should reference CVE-2020-28050 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2020-27165

CVE-2020-27165 is a reservation duplicate of CVE-2020-28050 for Zoho ManageEngine Desktop Central. Affects Desktop Central prior to build 10.0.647; the root cause is an authentication secret that can be shared across multiple agents to communicate with the server. This leads to potential unauthor...

ChirpStack Network Server Denial of Service Vulnerability

ChirpStack Network Server is an open source LoRaWAN service for individual developers. The software is used in the wireless connectivity aspect of the Internet of Things and is characterized by low power consumption, long range and high capacity. A security vulnerability exists in ChirpStack...

CVE-2020-7373

vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widgettabbedcontainertabpanel request. NOTE: this issue exists because of an incomplete fix for CVE-2019-16759. ALSO NOTE: CVE-2020-7373 is a duplicate of CVE-2020-17496. CVE-2020-17496 is...