Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-0114. Reason: This candidate is a duplicate of CVE-2014-0114. CVE abstraction content decisions did not require a second ID. Notes: All CVE users should reference CVE-2014-0114 instead of this candidate. All references and...

WordPress MM Duplicate plugin <= 1.2 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress MM Duplicate plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip Version: 1.2 tested --- PoC ---...

Pacific Software Carello 1.2.1 File Duplication and Source Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1245/info A remote user can gain read and write access on a target machine running Carello shopping cart software. First, a user may create a duplicate of a known file in a known directory on the target host through add.e...

Oracle Internet Directory 10.1.2.0.2 'oidldapd' Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/37833/info Oracle Internet Directory is prone to a remote memory-corruption vulnerability. Exploits may allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will...

Microsoft Windows NT 4.0/4.0 SP1/4.0 SP2/4.0 SP3 DoS Duplicate Hostname Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/298/info NT Workstations and Servers must have unique hostnames if they reside on the same network. Should an NT host attempt to use an existing hostname, the second server with the new duplicate name will fail to start i...

WebMaster ConferenceRoom 1.8 Developer Edition DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2178/info WebMaster ConferenceRoom Developer Edition is a chat package which enables a large community of users to chat together. ConferenceRoom has a wide range of capabilities and a user friendly channel moderation...

Slack: Password Policy issue (Weak Protect)

Ehy, I don't know if this is valid, but I decide to report it because when I try to report it on hackerone, the issue becomes duplicate, so that's not bad at all, issue valid but duplicate. This is the poc: http://grabilla.com/04616-eda16a72-0174-4eb1-82c6-4716a66b60d1.html Well, let's explain th...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4286. Reason: This candidate is a duplicate of CVE-2013-4286. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2013-4286 instead of this candidate. All references and descriptions in this...

CVE-2014-4286

CVE-2014-4286 is a duplicate of CVE-2013-4286 and the connected IBM and vendor advisories detail concrete Tomcat-related vulnerabilities in the 2013-4286 family. The primary technical issue is Apache Tomcat HTTP request smuggling via inconsistent headers (Transfer-Encoding: chunked with Content-L...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-6795. Reason: This candidate is a duplicate of CVE-2013-6795. A typo in an external publication caused this ID to be associated with the wrong vulnerability. Notes: All CVE users should reference CVE-2013-6795 instead of this...

CVE-2013-6764

CVE-2013-6764 is a duplicate of CVE-2013-6795. The connected records describe the vulnerability in the Rackspace OpenStack Windows Guest Agent for XenServer prior to 1.2.6.0: remote attackers can trigger arbitrary code execution by sending a crafted serialized .NET object to TCP port 1984, causin...

CVE-2012-3415

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2401. Reason: This candidate is a duplicate of CVE-2012-2401. Notes: All CVE users should reference CVE-2012-2401 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5964. Reason: This candidate is a duplicate of CVE-2013-5964. Notes: All CVE users should reference CVE-2013-5964 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2012-3415

CVE-2012-3415 is rejected/not used; reference CVE-2012-2401 as the active entry.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-5965. Reason: This candidate is a duplicate of CVE-2013-5965. Notes: All CVE users should reference CVE-2013-5965 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2013-4145

CVE-2013-4145 is a duplicate of CVE-2012-3414. Connected data shows a TYPO3 SWFUpload movieName Cross Site Scripting vulnerability (CVE-2012-3414) where an attacker can exploit the movieName parameter to perform XSS and potentially steal cookies. The OpenVAS entry confirms the XSS nature and cook...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2650. Reason: This candidate is a reservation duplicate of CVE-2014-2650. Notes: All CVE users should reference CVE-2014-2650 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2014-2984

CVE-2014-2984 is a reservation duplicate of CVE-2014-2650. The connected records show the actual vulnerability as CVE-2014-2650: Unify OpenStage/OpenScape Desk Phone IP before V3 R3.11.0 SIP has an OS command injection vulnerability in the web-based management interface. Affected product: Unify O...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2741. Reason: This candidate is a duplicate of CVE-2014-2741. Notes: All CVE users should reference CVE-2014-2741 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2014-0360

CVE-2014-0360 is a duplicate of CVE-2014-2741 and corresponds to an Openfire XMPP-layer DoS issue. Affected software: Openfire prior to 3.9.2, due to improper restriction in nio/XMLLightweightParser.java that allows crafted XMPP streams with compressed XML to cause resource exhaustion (xmppbomb)....