5456 matches found
CVE-2018-1000214
CVE-2018-1000214 is a reservation duplicate of CVE-2018-1999024; the latter is an active vulnerability in MathJax. CVE-2018-1999024 describes a Cross Site Scripting (XSS) vulnerability in MathJax versions prior to 2.7.4 via the \unicode{} macro, allowing potentially untrusted JavaScript to run in...
CVE-2018-1000213
The Battle for Wesnoth Project (Wesnoth) is affected. Versions 1.7.0 through 1.14.3 contain a Code Injection vulnerability in the Lua scripting engine that can lead to code execution outside the sandbox, exploitable via loading specially-crafted saved games, networked games, replays, and player c...
CVE-2018-1000212
CVE-2018-1000212 is a reserved duplicate of CVE-2018-1999022. The connected data describes the vulnerability in the PEAR HTML_QuickForm package: version 3.2.14 contains an eval injection (CWE-95) in multiple methods (HTML_QuickForm::getSubmitValue, HTML_QuickForm::validate, HTML_QuickForm_hiersel...
CVE-2018-1000220
CVE-2018-1000220 is rejected/not used; a reservation duplicate of CVE-2014-5462.
CVE-2018-3782
CVE-2018-3782 is a reservation duplicate of CVE-2018-1002203. Connected details confirm that unzipper (npm) prior to 0.8.13 is vulnerable to directory traversal (Zip-Slip), allowing arbitrary file write during archive extraction. The vulnerability affects unzipper before 0.8.13; remediation is to...
CVE-2018-5013
CVE-2018-5013 is rejected/not used; this candidate is a duplicate of CVE-2018-5103.
Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities
Summary IBM Security SiteProtector System has addressed the following vulnerabilities in GSKit. Vulnerability Details CVEID: CVE-2018-1428 DESCRIPTION: IBM GSKit uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base Scor...
CVE-2018-14032
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
UBUNTU-CVE-2018-14032
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2018-14032
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2018-14032
This CVE entry is rejected; reference CVE-2018-11206 instead; not an active vulnerability.
CVE-2018-3768
CVE-2018-3768 is a rejected candidate; reference CVE-2018-1000539 instead.
CVE-2018-7775
CVE-2018-7775 is a duplicate of CVE-2017-9960 and does not represent a distinct vulnerability entry. Connected records confirm that the underlying issue is an information-disclosure vulnerability in Schneider Electric U.motion Builder software versions 1.2.1 and prior, where an error response rev...
Security Bulletin: Multiple vulnerabilities in the IBM GSKit and IBM GSKit-Crypto affect IBM Performance Management products
Summary Multiple vulnerabilities in the IBM GSKit and IBM GSKit-Crypto affect IBM Performance Management products. Vulnerability Details CVEID: CVE-2018-1447 DESCRIPTION: The GSKit CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak...
CVE-2018-12938
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
CVE-2018-12938
This CVE entry is rejected/not used per the Initial Description.
CVE-2018-12938
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
UBUNTU-CVE-2018-12938
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17833. Reason: This candidate is a duplicate of CVE-2017-17833. Notes: All CVE users should reference CVE-2017-17833 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Cross site request forgery (csrf)
Tooltipy tooltips for WP version 5 contains a Cross ite Request Forgery CSRF vulnerability in Settings page that can result in could allow anybody to duplicate posts. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1...
CVE-2018-1000505
Tooltipy tooltips for WP version 5 contains a Cross ite Request Forgery CSRF vulnerability in Settings page that can result in could allow anybody to duplicate posts. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1...