IBM MQ 8.x < 8.0.0.3 Multiple Information Disclosure (credentialed check)

The version of IBM MQ formerly IBM WebSphere MQ 8.x installed on the remote Windows host is missing fix pack 8.0.0.3 or later. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the Advanced Message Security policy when a JMS client application sends a message to the...

CVE-2017-5437

CVE-2017-5437 is rejected/not used; refer to CVE-2016-10195/10196/10197 instead.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5483

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5483

CVE-2016-5483 concerns MySQL 5.5 (mysql/mysqldump) where newline characters in database/table names were not handled safely. A privileged user could cause a restoration of a mysqldump backup to execute arbitrary shell or SQL commands. Remediation: upgrade to upstream MySQL 5.5.55 (as in Debian DS...

CVE-2016-5483

Disclaimer: This data contains information about vulnerable...

CVE-2015-7572

CVE-2015-7572 is a duplicate of CVE-2013-0237 and is not a distinct vulnerability entry. Connected records show the underlying issue is a cross-site scripting (XSS) vulnerability in Plupload.as used by WordPress and other products, where an attacker can inject arbitrary script via the id paramete...

CVE-2017-5181

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7692. Reason: This candidate is a reservation duplicate of CVE-2017-7692. Notes: All CVE users should reference CVE-2017-7692 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2017-5181

CVE-2017-7692 affects SquirrelMail webmail (

CVE-2017-5437

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of...

UBUNTU-CVE-2017-5437

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197...

CVE-2017-5437

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197...

Mail.ru: Дубликат: https://hackerone.com/reports/219171 (доступ к аккаунту, через сброс пароля)

duplicate: https://hackerone.com/reports/219171...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10326. Reason: This candidate is a reservation duplicate of CVE-2016-10326. Notes: All CVE users should reference CVE-2016-10326 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2016-1000259

CVE-2016-1000259 is rejected/not used and does not represent an active vulnerability entry; consult CVE-2016-10326.

HackerOne: Race condition leads to duplicate payouts

@jigarthakkar39 discovered a race condition issue with some recent changes to our payments code that caused him to be able to receive duplicate payouts for some bounties. A number of variables and timing had to be just right for it to actually allow a malicious actor to exploit this and receive...

Vulnerable Through Use Of C Library

Nokogiri is vulnerable to denial of service DoS attacks. These attacks are possible through the use and inclusion of the C library libxml2. This library is vulnerable to CVE-2016-4483. It might also be a duplicate of CVE-2016-3627...

CVE-2017-7469

This CVE entry is rejected and not used; reference CVE-2017-7466 instead.

Out-of-bounds

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627...

CVE-2016-4483

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read and application crash via a non-UTF-8 attribute value, related to serialization. NOTE: this vulnerability may be a duplicate of CVE-2016-3627...