PT-2022-29734

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A potential security issue exists due to a dummy ptr check that could lead to duplicate active bo. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29405

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description A potential security issue exists due to a dummy ptr check that could lead to duplicate active bo. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-30314

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A potential security issue exists due to a dummy ptr check that could lead to duplicate active bo. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

CVE-2022-29280

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28366. Reason: This candidate is a reservation duplicate of CVE-2022-28366. Notes: All CVE users should reference CVE-2022-28366 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-29280

CVE-2022-29280 is a reservation duplicate of CVE-2022-28366 and is not a separate active vulnerability entry; the connected details show the underlying issue in HtmlUnit-NekoHtml/ CyberNeko HTML: a denial-of-service via crafted Processing Instruction input causing heap memory consumption. Affecte...

CVE-2022-24874

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-28820. Reason: This candidate is a reservation duplicate of CVE-2022-28820. Notes: All CVE users should reference CVE-2022-28820 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Duplicate asset can be added

Lines of code Vulnerability details Impact Initialize function can be called multiple times with same asset. Calling with same asset will make duplicate entries in assets list. Any function reading assets will get impacted and would retrieve duplicate asset Proof of Concept 1. Observe that...

CVE-2022-27427

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-38745. Reason: This candidate is a duplicate of CVE-2021-38745. Notes: All CVE users should reference CVE-2021-38745 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

ALPINE-CVE-2022-27458

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...

CVE-2022-27458

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...

UBUNTU-CVE-2022-27458

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...

CVE-2022-1246

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-1280. Reason: This candidate is a reservation duplicate of CVE-2022-1280. Notes: All CVE users should reference CVE-2022-1280 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2021-34250

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2021-33396. Reason: This record is a duplicate of CVE-2021-33396. Notes: All CVE users should reference CVE-2021-33396 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2022-1072

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-26254. Reason: This candidate is a reservation duplicate of CVE-2022-26254. Notes: All CVE users should reference CVE-2022-26254 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2022-1072

CVE-2022-1072 is a reserved candidate; however, connected records identify CVE-2022-26254 as the active entry. The affected software is WoWonder The Ultimate PHP Social Network Platform v4.0.0, which contains an access control flaw allowing unauthenticated attackers to arbitrarily rename group ID...

CVE-2021-44103

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-42192. Reason: This candidate is a duplicate of CVE-2021-42192. Notes: All CVE users should reference CVE-2021-42192 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...

CVE-2021-44103

CVE-2021-44103 is documented as a duplicate of CVE-2021-42192, with connected data detailing a privilege-escalation flaw in KONGA 0.14.9. The Nuclei template for CVE-2021-42192 describes an improper access control that lets an authenticated user elevate to full admin by crafting a request (notabl...

CVE-2022-25757

In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a duplicate key, the attacker can bypass the bodyschema validation in the request-validation plugin. For example,...

PT-2022-17492 · Apache · Apache Apisix

Name of the Vulnerable Software and Affected Versions: Apache APISIX versions prior to 2.13.0 Description: The issue allows an attacker to bypass body schema validation in the request-validation plugin by passing a JSON with a duplicate key. This can be achieved by sending a JSON payload such as...

CVE-2022-25608

Cross-Site Request Forgery CSRF in Yoo Slider – Image Slider & Video Slider WordPress plugin allows attackers to trick authenticated users into unwanted slider duplicate or delete action...