Node.js Denial of Service Vulnerability (CNVD-2018-11809)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

CVE-2017-16011

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6708. Reason: This candidate is a duplicate of CVE-2012-6708. Notes: All CVE users should reference CVE-2012-6708 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2017-16011

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-6708. Reason: This candidate is a duplicate of CVE-2012-6708. Notes: All CVE users should reference CVE-2012-6708 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

CVE-2017-16012

CVE-2017-16012 is rejected and not active; refer to CVE-2015-9251.

CVE-2017-16012

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-11550

The CVE-2018-11550 entry maps to CVE-2018-9850 (duplicate). Connected data show a concrete vulnerability in Gxlcms QY v1.0.0713 affecting the Lib\Lib\Action\Admin\DataAction.class.php, where the id parameter in Admin-Data-del requests can be manipulated to cause remote deletion of arbitrary files...

CVE-2017-14794

CVE-2017-14794 is rejected; this candidate should reference CVE-2018-7502 and is not an active vulnerability entry.

CVE-2017-14786

CVE-2017-14786 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14789

CVE-2017-14789 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14790

CVE-2018-7502 is described in connected documents as a vulnerability in Beckhoff TwinCAT where kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker capable of code execution on the target could exploi...

CVE-2017-14781

CVE-2017-14781 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14793

Beckhoff TwinCAT: CVE-2018-7502 (linked via duplicate of CVE-2017-14793) affects kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1. Root cause is lack of proper validation of user-supplied pointer values in kernel drivers, enabling a code-executing attack to obtain...

CVE-2017-14776

CVE-2017-14776 is rejected/not used and does not represent an active vulnerability entry; reference CVE-2018-7502.

CVE-2017-14788

CVE-2018-7502 (Beckhoff TwinCAT) involves an untrusted pointer dereference in Beckhoff TwinCAT kernel drivers. The vulnerability affects TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1, where user-supplied pointer values are not properly validated. An attacker who can execute code...

CVE-2017-14778

CVE-2017-14778 is rejected/not used; reference CVE-2018-7502 instead.

CVE-2017-14783

CVE-2017-14783 is a reservation duplicate of CVE-2018-7502. Connected documents provide concrete details for CVE-2018-7502: Beckhoff TwinCAT kernel drivers (TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1) fail to validate user-supplied pointer values, enabling an attacker able to...

CVE-2018-10991

This CVE-2018-10991 entry is rejected/not used; reference CVE-2018-10990 instead.

CVE-2018-3617

Intel Integrated Performance Primitives (IPP) Cryptography Library prior to version 2018 U3.1 is vulnerable to information disclosure due to not guaranteeing constant execution time. Exploitation could reveal sensitive data. Affected components are multiple IPP crypto implementations. Mitigation:...

CVE-2018-1119

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10184. Reason: This candidate is a reservation duplicate of CVE-2018-10184. Notes: All CVE users should reference CVE-2018-10184 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2018-1119

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-10184. Reason: This candidate is a reservation duplicate of CVE-2018-10184. Notes: All CVE users should reference CVE-2018-10184 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...