5442 matches found
HackerOne: Redirect FILTER bypass in report/comment
Hello, I made few reports recently. But, I guess you did not understand my perspective. As my video recorder is not working, I am explaining everything in written. Lately, I reported about 'External Link Warning Bypass to open redirect users' and @michiel attended the report. Actually, the report...
DEBIAN-CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
UBUNTU-CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2216. Reason: This candidate is a reservation duplicate of CVE-2014-2216. Notes: All CVE users should reference CVE-2014-2216 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5754, CVE-2014-5755, CVE-2014-8538. Reason: This candidate is a duplicate of CVE-2014-5754, CVE-2014-5755, and CVE-2014-8538. Further investigation showed that an applicable library product did not exist. Notes: All CVE users...
CVE-2014-5530
CVE-2014-5530 is rejected/not used; refer to CVE-2014-5754, CVE-2014-5755, or CVE-2014-8538.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2388. Reason: This candidate is a reservation duplicate of CVE-2014-2388. Notes: All CVE users should reference CVE-2014-2388 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2014-1470
The CVE shows that BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 did not enforce a password for the SMB Storage and Access service, enabling an unauthenticated attacker to read/write files via SMB over Wi‑Fi or USB (Development Mode). Root cause: SMB authentication bypass in the ...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5196. Reason: This candidate is a reservation duplicate of CVE-2014-5196. Notes: All CVE users should reference CVE-2014-5196 instead of this candidate. All references and descriptions in this candidate have been removed to...
MGASA-2014-0327 Updated kdelibs4 packages fix security vulnerability and various bugs
This update fixes a security vulnerability in the polkit authentication backend of kdelibs CVE-2014-5033 mga13792, and fixes some additional issues: - duplicate targets in PythonMacros.cmake reviewboard kde 111371, - kded4 leak sockets in NetworkInterface::isWireless bko324954, - media type...
Duplicate Post 2.5 - options-general.php post Parameter Reflected XSS
The Yoast Duplicate Post WordPress plugin was affected by an options-general.php post Parameter Reflected XSS security vulnerability...
MM Duplicate <= 1.2 - SQL Injection
The mm-duplicate WordPress plugin was affected by a SQL Injection security vulnerability...
Duplicate Post 2.5 - duplicate-post-admin.php User Login Cookie Value SQL Injection
The Yoast Duplicate Post WordPress plugin was affected by a duplicate-post-admin.php User Login Cookie Value SQL Injection security vulnerability...
WordPress Duplicate Post Plugin <= 2.5 - SQL Injection
This plugin is prone to an SQL injection in duplicate-post-admin.php. Solution Upgrade the plugin...
WordPress Duplicate Post Plugin <= 2.5 - Reflected XSS
This plugin is prone to a reflected XSS in options-general.php post parameter. Solution Update the plugin...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-5139. Reason: This candidate is a duplicate of CVE-2014-5139, and has also been used to refer to an unrelated topic that is currently outside the scope of CVE. This unrelated topic is a LibreSSL code change adding functionali...
CVE-2014-2970
CVE-2014-2970 is rejected/not used and does not represent an active vulnerability entry.
CVE-2014-4740
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-4907, CVE-2014-4908. Reason: This candidate is a duplicate of CVE-2014-4907 and CVE-2014-4908. Notes: All CVE users should reference CVE-2014-4907 and/or CVE-2014-4908 instead of this candidate. All references and description...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-4907, CVE-2014-4908. Reason: This candidate is a duplicate of CVE-2014-4907 and CVE-2014-4908. Notes: All CVE users should reference CVE-2014-4907 and/or CVE-2014-4908 instead of this candidate. All references and description...