6285 matches found
GHSA-CHGG-RRMV-5Q7X Withdrawn
Withdrawn: Duplicate of GHSA-vgrx-w6rg-8fqf...
Withdrawn
Withdrawn: Duplicate of GHSA-vgrx-w6rg-8fqf...
PT-2020-21573
Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The issue is a duplicate and has been withdrawn, as indicated by the source OSV. Recommendations At the moment, there is no information about a newer version that contains a fi...
CVE-2015-5238
CVE-2015-5238 has no separate technical details in the initial entry; it is a reservation duplicate of CVE-2015-3796. Connected advisories indicate the TRE library vulnerability involved a crafted regular expression leading to context-dependent memory corruption (CVE-2015-3796) and a related memo...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-14159. Reason: This candidate is a reservation duplicate of CVE-2020-14159. Notes: All CVE users should reference CVE-2020-14159 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2020-13983
CVE-2020-13983 is rejected/not used and does not represent an active vulnerability entry.
How to Clean up the Credentials Manager in Veeam Backup & Replication
Challenge Over time, duplicate or outdated credentials may be saved in the Credentials Manager of Veeam Backup & Replication. This article documents a process for reviewing and cleaning up the Credentials Manager. Solution No changes to the Credentials Manager account list are saved untilOK is...
CVE-2020-15093
The tough library Rust/crates.io prior to version 0.7.1 does not properly verify the threshold of cryptographic signatures. It allows an attacker to duplicate a valid signature in order to circumvent TUF requiring a minimum threshold of unique signatures before the metadata is considered valid. A...
CVE-2020-15093
The CVE-2020-15093 entry concerns the tough library (Rust/crates.io) prior to version 0.7.1, where the threshold of cryptographic signatures is not properly verified. This allows an attacker to duplicate a valid signature to bypass TUF’s minimum threshold of unique signatures before metadata is c...
UBUNTU-CVE-2020-14151
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference ID instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2020-14151
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference ID instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usa...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11813. Reason: This candidate is a duplicate of CVE-2018-11813. Notes: All CVE users should reference ID instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usa...
CVE-2020-7671
goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to b...
CVE-2020-10068
In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...
CVE-2020-10068
In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-13817. Reason: This candidate is a reservation duplicate of CVE-2020-13817. Notes: All CVE users should reference CVE-2020-13817 instead of this candidate. All references and descriptions in this candidate have been removed t...
PT-2020-11895
Name of the Vulnerable Software and Affected Versions zephyrproject-rtos zephyr versions 1.14.0 through 2.2.0 and later versions Description The issue is related to the Bluetooth subsystem in the Zephyr project, where certain duplicate and back-to-back packets can cause incorrect behavior. This...
CVE-2020-10068: Improper Input Validation
In the Zephyr project Bluetooth subsystem, certain duplicate and back-to-back packets can cause incorrect behavior, resulting in a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions, and version 1.14.0 and later versions...
CVE-2020-7659
reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...
UBUNTU-CVE-2020-7659
reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Content-Length header twice. Furthermore, invalid Transfer Encoding headers were found to be parsed as...