CVE-2016-1000021

CVE-2016-1000021 is rejected and not used; reference CVE-2016-10538.

GHSA-2MRJ-435V-C2CR Duplicate Advisory: possible DoS caused by malformed signature decoding in Pure-Python ECDSA

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pwfw-mgfj-7g3g. This link is maintained to preserve external references...

CVE-2015-5155

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3609. Reason: This candidate is a reservation duplicate of CVE-2010-3609. Notes: All CVE users should reference CVE-2010-3609 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4187. Reason: This candidate is a duplicate of CVE-2013-4187. Notes: All CVE users should reference CVE-2013-4187 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-4224

The vulnerability tracked as CVE-2013-4187 (CVE-2013-4224 is a duplicate) affects the Flippy module for Drupal 7.x-1.x prior to 7.x-1.2. The module does not properly restrict access to nodes when generating previous/next links, permitting remote authenticated users with the permission to access c...

CVE-2009-5047

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-4611. Reason: This candidate is a duplicate of CVE-2009-4611. Notes: All CVE users should reference CVE-2009-4611 rather than this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2009-5047

CVE-2009-5047 is a Jetty remote code execution vulnerability caused by a command-injection flaw in the Cookie Dump Servlet and HTTP Content-Length header. The initial record marks this CVE as a duplicate/rejected entry, but connected documents provide concrete details for Jetty (versions around 6...

CVE-2019-9466

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2019-9466

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2019-9466

CVE-2019-9466 is rejected/not used per the description; please reference CVE-2019-9503.

CVE-2011-3586

CVE-2011-3586 is rejected and not active; reference CVE-2011-3504 instead.

CVE-2018-20320

CVE-2018-20320 is rejected/not used and does not represent an active vulnerability entry.

CVE-2007-2841

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3947. Reason: This candidate is a reservation duplicate of CVE-2007-3947. Notes: All CVE users should reference CVE-2007-3947 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2007-2841

CVE-2007-2841 is rejected and not an active vulnerability entry; reference CVE-2007-3947 instead.

CVE-2019-17110

CVE-2019-17110 concerns kube-state-metrics 1.7.x before 1.7.2, where an experimental feature exposed annotations as metrics. This could cause secret content to be leaked via metric labels when combined with default kubectl behavior. Root cause: enabling annotation-to-metric exposure. Impact: expo...

Measuring the Security of IoT Devices

In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 varies by vendo...

SUSE-SU-2019:2521-1 Security update for SUSE Manager Server 3.2

This update fixes the following issues: cobbler: - Jinja2 template library fix bsc1141661 pgjdbc-ng: - Allow dots in database name bsc1146416 py26-compat-salt: - Get tornado dependency from the system on SLE12 bsc1149409 - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 bsc1147126...

The vulnerability of the FFmpeg multimedia library, related to the assignment of the null pointer, allows a hacker to trigger a service failure.

The vulnerability of the FFmpeg multimedia library relates to the use of a zero pointer when detecting duplicate frames in a single frame incorrectly. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially crafted HEVC data...

Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)

The Duplicate Post plugin was vulnerable to Authenticated Stored Cross-Site Scripting XSS. However, the POST request had a CSRF nonce that was verified, and no user's without the unfilteredhtml capability, such as Author or Subscriber, were able to access the affected Duplicate Post settings page...

WordPress Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Exploit Author: Unk9vvN Vendor Homepage: https://duplicate-post.lopo.it/ Software Link: https://wordpress.org/plugins/duplicate-post/ Version: 3.2.3 Tested on: Kali Linux CV...