ALPINE-CVE-2019-0220

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/', directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing wi...

HackerOne: Race Condition leads to undeletable group member

Hi, Summary: There exists a Race Condition in which the user can add themselves twice to a group which will make them unremovable from group. They themselves cannot remove themselves from the group as well as the group leader cannot remove that user from the group. Ofcourse this is a low severity...

CVE-2019-12582

CVE-2019-12582 is a reserved duplicate of CVE-2019-12583. The connected entry for CVE-2019-12583 describes a Missing Access Control in the Free Time component of Zyxel UAG, USG, and ZyWall devices, allowing a remote attacker to generate guest accounts by directly accessing the account generator, ...

CVE-2019-12396

The concrete vulnerability is CVE-2019-5440: Revive Adserver versions = 4.2.1 (to fix the token generation weakness).

CVE-2018-8812

CVE-2018-8812 is a reservation duplicate of CVE-2018-15610 and should not be used as an active vulnerability entry. The actual details are under CVE-2018-15610: a vulnerability in Avaya IP Office one-X Portal that allows an authenticated attacker to read and delete arbitrary files. Affected versi...

CVE-2019-3892

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11599. Reason: This candidate is a reservation duplicate of CVE-2019-11599. Notes: All CVE users should reference CVE-2019-11599 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2019-3892

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11599. Reason: This candidate is a reservation duplicate of CVE-2019-11599. Notes: All CVE users should reference CVE-2019-11599 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2019-3892

CVE-2019-3892 is rejected/not used; reference CVE-2019-11599 instead.

CVE-2019-5428

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2019-5428

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-11358. Reason: This candidate is a duplicate of CVE-2019-11358. Notes: All CVE users should reference CVE-2019-11358 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

DEBIAN-CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

GHSA-R53M-PFR5-7V87 Moderate severity vulnerability that affects org.apache.tomcat.embed:tomcat-embed-core

Withdrawn: Duplicate of GHSA-qcxh-w3j9-58qr...

UBUNTU-CVE-2019-11338

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to cause a denial of service NULL pointer dereference and out-of-array access or possibly have unspecified other impact via crafted HEVC data...

Moderate: Red Hat Security Advisory: Red Hat Ceph Storage 2.5 security and bug fix update

An update for ceph and grafana is now available for Red Hat Ceph Storage 2.5 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Duplicate Page Plugin for WordPress < 3.4 SQL Injection

The WordPress Duplicate Page Plugin installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input passed via the 'post' parameter for dtduplicatepostasdraft 'action' parameter. A remote attacker can exploit this issue to manipulate S...

WordPress Duplicate Page plugin <= 3.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Marc-Alexandre Montpas in WordPress Duplicate Page plugin versions = 3.3. Solution Update the WordPress Duplicate Page plugin to the latest available version at least 3.4...

Duplicate Page < 3.4 - Authenticated SQL Injection

This vulnerability is exploitable by any users with an account on the vulnerable site regardless of the privileges they have – e.g., subscribers...

openSUSE Security Update : bitcoin (openSUSE-2019-731)

This update for bitcoin to version 0.16.3 fixes the following issues : - CVE-2018-17144: Prevent remote denial of service application crash exploitable by miners via duplicate input bsc1108992. For additional changes please check the changelog. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Linux: Duplicated UIDs

Duplicated UIDs can occur after modifying Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribut...

CVE-2018-14038

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-7642. Reason: This candidate is a reservation duplicate of CVE-2018-7642. Notes: All CVE users should reference CVE-2018-7642 instead of this candidate. All references and descriptions in this candidate have been removed to...