6285 matches found
CVE-2009-5047
CVE-2009-5047 is a Jetty remote code execution vulnerability caused by a command-injection flaw in the Cookie Dump Servlet and HTTP Content-Length header. The initial record marks this CVE as a duplicate/rejected entry, but connected documents provide concrete details for Jetty (versions around 6...
CVE-2019-9466
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
UBUNTU-CVE-2019-9466
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9503. Reason: This candidate is a duplicate of CVE-2019-9503. Notes: All CVE users should reference CVE-2019-9503 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2019-9466
CVE-2019-9466 is rejected/not used per the description; please reference CVE-2019-9503.
CVE-2011-3586
CVE-2011-3586 is rejected and not active; reference CVE-2011-3504 instead.
CVE-2018-20320
CVE-2018-20320 is rejected/not used and does not represent an active vulnerability entry.
CVE-2007-2841
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3947. Reason: This candidate is a reservation duplicate of CVE-2007-3947. Notes: All CVE users should reference CVE-2007-3947 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2007-2841
CVE-2007-2841 is rejected and not an active vulnerability entry; reference CVE-2007-3947 instead.
CVE-2019-17110
CVE-2019-17110 concerns kube-state-metrics 1.7.x before 1.7.2, where an experimental feature exposed annotations as metrics. This could cause secret content to be leaked via metric labels when combined with default kubectl behavior. Root cause: enabling annotation-to-metric exposure. Impact: expo...
Measuring the Security of IoT Devices
In August, CyberITL completed a large-scale survey of software security practices in the IoT environment, by looking at the compiled software. Data Collected: 22 Vendors 1,294 Products 4,956 Firmware versions 3,333,411 Binaries analyzed Date range of data: 2003-03-24 to 2019-01-24 varies by vendo...
SUSE-SU-2019:2521-1 Security update for SUSE Manager Server 3.2
This update fixes the following issues: cobbler: - Jinja2 template library fix bsc1141661 pgjdbc-ng: - Allow dots in database name bsc1146416 py26-compat-salt: - Get tornado dependency from the system on SLE12 bsc1149409 - Catch SSLError for TLS 1.2 bootstraps with RES/RHEL6 and SLE11 bsc1147126...
FFmpeg Null Pointer DoS
The vulnerability of the FFmpeg multimedia library relates to the use of a zero pointer when detecting duplicate frames in a single frame incorrectly. Exploiting this vulnerability could allow an attacker to cause a service failure by using specially crafted HEVC data...
Duplicate Post <= 3.2.3 - Authenticated Stored Cross-Site Scripting (XSS)
The Duplicate Post plugin was vulnerable to Authenticated Stored Cross-Site Scripting XSS. However, the POST request had a CSRF nonce that was verified, and no user's without the unfilteredhtml capability, such as Author or Subscriber, were able to access the affected Duplicate Post settings page...
WordPress Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Duplicate-Post 3.2.3 - Persistent Cross-Site Scripting Exploit Author: Unk9vvN Vendor Homepage: https://duplicate-post.lopo.it/ Software Link: https://wordpress.org/plugins/duplicate-post/ Version: 3.2.3 Tested on: Kali Linux CV...
GPAC null pointer dereference vulnerability (CNVD-2019-40479)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A null pointer dereference vulnerability exists in AVCDuplicateConfig in isomedia/avcext.c in GPAC 0.7.1. An attacker could exploit this vulnerability via specially crafted files to cause a denial of service...
PT-2019-10440 · Gpac +1 · Gpac +1
Name of the Vulnerable Software and Affected Versions: GPAC version 0.7.1 Description: The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted file. This occurs because the cfg variable could be NULL when the lin...
CVE-2019-6745
CVE-2019-6745 entry is rejected and not used.
CVE-2019-9457
CVE-2019-9457 is rejected/not used and does not represent an active vulnerability entry.
Repository 'Used Space' Value Greater Than 'Capacity'
Challenge A Repository listed under Backup Infrastructure Backup Repositories has a 'Used Space' value that is greater than the 'Capacity' of the storage. Cause This occurs when repositories are backed by storage that has the ability to reduce the space used by restore points, like deduplication...