UBUNTU-CVE-2018-1000845

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID: CVE-2017-6519. Reason: This candidate is a duplicate of CVE-2017-6519. Notes: All CVE users should reference CVE-2017-6519 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-4700

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10242. Reason: This candidate is a reservation duplicate of CVE-2016-10242. Notes: All CVE users should reference CVE-2016-10242 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2018-4700

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2018-4700

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-4300. Reason: This candidate is a duplicate of CVE-2018-4300. Notes: All CVE users should reference CVE-2018-4300 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-1000859

CVE-2018-19518 is a PHP IMAP vulnerability where imap_open() mishandles the server parameter, enabling a remote authenticated attacker to inject commands. The issue stems from improper input validation in the IMAP component, potentially allowing arbitrary OS commands via crafted server input. Exp...

CVE-2018-1000853

CVE-2018-1000853 is a reserved/duplicate entry of CVE-2018-18925. The connected CVE-2018-18925 details Gogs 0.11.66 remote code execution via improper session ID handling (session file forgery) in the Macaron-based Go Git Service, caused by directory traversal in the session management flow. Expl...

CVE-2018-2515

CVE-2018-2515 is rejected; reference CVE-2018-2815 instead; this entry is not an active vulnerability.

CVE-2018-1000818

CVE-2018-1000818 is rejected/not used; reference CVE-2018-19132 instead; this candidate does not represent an active vulnerability entry.

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

Design/Logic Flaw

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

CVE-2018-19654

An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. There is a discrepancy in username checking between a component that does string validation, and a component that is supposed to query a MySQL database. Thus, it is possible to register a new account with a...

The vulnerability of the software for detecting intrusion prevention in Cisco Firepower System Software allows a perpetrator to circumvent the system’s intrusion detection rules.

The vulnerability of the Cisco Firepower System Software’s intrusion detection mechanism is related to errors in processing duplicate TCP packets. Exploiting this vulnerability allows a malicious actor to circumvent the intrusion detection system’s rules by using specially crafted requests...

CVE-2018-19270

CVE-2018-16276 describes a Linux kernel flaw in the yurex_read function located in drivers/usb/misc/yurex.c, with exploitation possible on affected kernels prior to 4.17.7 due to inadequate bounds checking in the USB driver. The vulnerability can allow a local attacker to crash the kernel or esca...

CVE-2018-19130

In Libav 12.3, there is an invalid memory access in vc1decodeframe in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127...

SUSE SLES12 Security Update : smt, yast2-smt (SUSE-SU-2018:2898-2)

This update for yast2-smt to 3.0.14 and smt to 3.0.37 fixes the following issues : These security issues were fixed in SMT : CVE-2018-12471: Xml External Entity processing in the RegistrationSharing modules allowed to read arbitrary file read bsc1103809. CVE-2018-12470: SQL injection in...

GHSA-QGM9-232X-HWPX Moderate severity vulnerability that affects org.keycloak:keycloak-core

Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7...

Moderate severity vulnerability that affects org.keycloak:keycloak-core

Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7...

CVE-2018-0056

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...