6287 matches found
CVE-2018-9306
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Heap overflow
Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...
CVE-2014-0158
Heap-based buffer overflow in the JPEG2000 image tile decoder in OpenJPEG before 1.5.2 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file because of incorrect j2kdecode, j2kreadeoc, and tcddecodetile interaction, a...
CVE-2018-9319
CVE-2018-9319 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-9323
CVE-2018-9323 is a reservation duplicate of CVE-2018-9322 and contains no technical details. The connected CVE-2018-9322 describes a vulnerability in BMW Head Unit HU_NBT infotainment, affecting 2012–2018 models, where local attackers abusing USB/OBD-II can bypass firmware update code signing and...
CVE-2018-9146
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2018-9306
CVE-2018-9306 is a rejected/reserved candidate and does not represent an active vulnerability entry.
UBUNTU-CVE-2018-9165
The pushdup function in util/decompile.c in libming through 0.4.8 does not recognize the need for ActionPushDuplicate to perform a deep copy when a String is at the top of the stack, making the library vulnerable to a util/decompile.c getName NULL pointer dereference, which may allow attackers to...
Code injection
IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...
PT-2018-12372
Name of the Vulnerable Software and Affected Versions IBM GSKit IBM DB2 for Linux, UNIX and Windows versions 9.7 through 11.1 Description The issue concerns a problem with the PRNG state being duplicated across fork system calls when multiple ICC instances are loaded, potentially leading to...
CVE-2018-1426: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
IBM GSKit IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 duplicates the PRNG state across fork system calls when multiple ICC instances are loaded which could result in duplicate Session IDs and a risk of duplicate key material. IBM X-Force ID: 139071...
NetScaler SD-WAN Path Continuously Flipping Between GOOD/BAD/DEAD on WAN Links
Something to observe here is whether the GOOD/BAD/DEAD is occurring while the link is idle, or while the link is under load traffic. The following information covers all cases, but this is the "most common root cause" for each scenario: Idle - speed/duplex mismatch, ARP issue, IPS/IDS device and ...
Unable to Sign On to SecureHub
Enrolled User unable to login to Secure Hub, while 2 users in Active Directory have same UPNUserPrincipalName. The Active Directory Users and Computers MMC ADUC will enforce unique values, However, duplicate values for userPrincipalName can be assigned to the users via code. Consider In AD that 2...
js-jquery: XSS in responses from cross-origin ajax requests
REJECTED CVE This CVE has been rejected. This candidate is a duplicate of CVE-2015-9251. Note: All CVE users should reference CVE-2015-9251 instead of this candidate...
CVE-2018-1000102
CVE-2018-1000102 is a rejected candidate; refer to CVE-2018-1000067 instead.
CVE-2016-5875
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2016-5320
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
ALPINE-CVE-2016-5320
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
ALPINE-CVE-2016-5875
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...