CVE-2018-1000672

CVE-2018-1000672 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-558213

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-15889

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-5783. Reason: This candidate is a reservation duplicate of CVE-2018-5783. Notes: All CVE users should reference CVE-2018-5783 instead of this candidate. All references and descriptions in this candidate have been removed to...

UBUNTU-CVE-2018-15889

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-5783. Reason: This candidate is a reservation duplicate of CVE-2018-5783. Notes: All CVE users should reference CVE-2018-5783 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-15672

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11207. Reason: This candidate is a reservation duplicate of CVE-2018-11207. Notes: All CVE users should reference CVE-2018-11207 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-15672

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11207. Reason: This candidate is a reservation duplicate of CVE-2018-11207. Notes: All CVE users should reference CVE-2018-11207 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2018-15672

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11207. Reason: This candidate is a reservation duplicate of CVE-2018-11207. Notes: All CVE users should reference CVE-2018-11207 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-1000213

The Battle for Wesnoth Project (Wesnoth) is affected. Versions 1.7.0 through 1.14.3 contain a Code Injection vulnerability in the Lua scripting engine that can lead to code execution outside the sandbox, exploitable via loading specially-crafted saved games, networked games, replays, and player c...

CVE-2018-1000212

CVE-2018-1000212 is a reserved duplicate of CVE-2018-1999022. The connected data describes the vulnerability in the PEAR HTML_QuickForm package: version 3.2.14 contains an eval injection (CWE-95) in multiple methods (HTML_QuickForm::getSubmitValue, HTML_QuickForm::validate, HTML_QuickForm_hiersel...

CVE-2018-1000214

CVE-2018-1000214 is a reservation duplicate of CVE-2018-1999024; the latter is an active vulnerability in MathJax. CVE-2018-1999024 describes a Cross Site Scripting (XSS) vulnerability in MathJax versions prior to 2.7.4 via the \unicode{} macro, allowing potentially untrusted JavaScript to run in...

CVE-2018-1000220

CVE-2018-1000220 is rejected/not used; a reservation duplicate of CVE-2014-5462.

CVE-2018-3782

CVE-2018-3782 is a reservation duplicate of CVE-2018-1002203. Connected details confirm that unzipper (npm) prior to 0.8.13 is vulnerable to directory traversal (Zip-Slip), allowing arbitrary file write during archive extraction. The vulnerability affects unzipper before 0.8.13; remediation is to...

CVE-2018-5013

CVE-2018-5013 is rejected/not used; this candidate is a duplicate of CVE-2018-5103.

Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities

Summary IBM Security SiteProtector System has addressed the following vulnerabilities in GSKit. Vulnerability Details CVEID: CVE-2018-1428 DESCRIPTION: IBM GSKit uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. CVSS Base Scor...

CVE-2018-14032

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2018-14032

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-14032

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-11206. Reason: This candidate is a reservation duplicate of CVE-2018-11206. Notes: All CVE users should reference CVE-2018-11206 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2018-14032

This CVE entry is rejected; reference CVE-2018-11206 instead; not an active vulnerability.

CVE-2018-3768

CVE-2018-3768 is a rejected candidate; reference CVE-2018-1000539 instead.

CVE-2018-7775

CVE-2018-7775 is a duplicate of CVE-2017-9960 and does not represent a distinct vulnerability entry. Connected records confirm that the underlying issue is an information-disclosure vulnerability in Schneider Electric U.motion Builder software versions 1.2.1 and prior, where an error response rev...