5456 matches found
UBUNTU-CVE-2017-1000049
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-8864. Reason: This candidate is a reservation duplicate of CVE-2015-8864. Notes: All CVE users should reference CVE-2015-8864 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2017-10669
Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 Java and OSCI Transport Library 1.6 .NET. An attacker with access to unencrypted OSCI protocol messages must send crafted protocol messages with duplicate IDs...
CVE-2017-9504
CVE-2017-9504 is a reservation duplicate of CVE-2017-9741 and, per linked records, affects ProjectSend r754. The vulnerability is in install/make-config.php, allowing remote attackers to execute arbitrary PHP code via the dbprefix parameter, related to replacing TABLES_PREFIX in the configuration...
CVE-2017-8813
CVE-2017-8831 affects the Linux kernel saa7164_bus_get in drivers/media/pci/saa7164/saa7164-bus.c, allowing local privilege escalation via a double-fetch vulnerability. Impact is described as local access with potential BOS/privilege implications; affected kernel versions include 4.11.5 and earli...
CVE-2016-3073
CVE-2016-3073 entry is rejected and does not represent an active vulnerability.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10214. Reason: This candidate is a reservation duplicate of CVE-2016-10214. Notes: All CVE users should reference CVE-2016-10214 instead of this candidate. All references and descriptions in this candidate have been removed t...
Cuvva: Missing Rate limiting on https://underwriter.partner.cuvva.com/login
Duplicate of 231380...
CVE-2017-9021
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-5937. Reason: This candidate is a reservation duplicate of CVE-2017-5937. Notes: All CVE users should reference CVE-2017-5937 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2017-9021
CVE-2017-9021 is a rejected candidate; reference CVE-2017-5937 instead.
CVE-2017-7492
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to...
UBUNTU-CVE-2017-7492
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
PT-2023-10646 · Canonical · Resteasy
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7503. Reason: This candidate is a reservation duplicate of CVE-2017-7503. Notes: All CVE users should reference CVE-2017-7503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2017-5242: Nexpose/InsightVM Virtual Appliance Duplicate SSH Host Key
Today, Rapid7 is notifying Nexpose and InsightVM users of a vulnerability that affects certain virtual appliances. While this issue is relatively low severity, we want to make sure that our customers have all the information they need to make informed security decisions regarding their networks. ...
CVE-2017-8767
CVE-2017-8767 is a duplicate and not an active vulnerability entry; reference CVE-2017-5526.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10220. Reason: This candidate is a reservation duplicate of CVE-2016-10220. Notes: All CVE users should reference CVE-2016-10220 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2017-1000040
CVE-2017-1000040 is a reservation duplicate of CVE-2017-7853, not a distinct active entry. Connected sources describe a vulnerability in libosip2 (GNU oSIP) where malformed SIP messages can cause heap buffer overflows in several functions (notably msg_osip_body_parse, osip_message_to_str, osip_bo...
CVE-2017-1000019
CVE-2017-5938 describes a Cross-site Scripting (XSS) vulnerability in the nav_path function of ViewVC (lib/viewvc.py). It allows remote attackers to inject arbitrary web script or HTML via the nav_data name. Affected versions are ViewVC before 1.0.14 and 1.1.x before 1.1.26. The issue is fixed in...
CVE-2017-8784
CVE-2017-8784 is a reservation duplicate of CVE-2017-7263. The connected documents confirm Potrace 1.14 has a heap-based buffer over-read in bm_readbody_bmp when processing BMP images, enabling denial of service. Fedora advisories indicate a later Potrace release (1.15) addressing this family of ...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9849. Reason: This candidate is a reservation duplicate of CVE-2016-9849. Notes: All CVE users should reference CVE-2016-9849 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9848. Reason: This candidate is a reservation duplicate of CVE-2016-9848. Notes: All CVE users should reference CVE-2016-9848 instead of this candidate. All references and descriptions in this candidate have been removed to...