CVE-2016-5875

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2018-6058

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11215. Reason: This candidate is a reservation duplicate of CVE-2017-11215. Notes: All CVE users should reference CVE-2017-11215 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-6059

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11225. Reason: This candidate is a reservation duplicate of CVE-2017-11225. Notes: All CVE users should reference CVE-2017-11225 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

UBUNTU-CVE-2018-0491

A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service relay crash because the KIST implementation allows a channel to be added more than once in the pending list...

DEBIAN-CVE-2017-18196

Leptonica 1.74.4 constructs unintended pathnames containing duplicated path components when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as...

UBUNTU-CVE-2017-18196

Leptonica 1.74.4 constructs unintended pathnames containing duplicated path components when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as...

CVE-2018-1000065

CVE-2018-1000065 is a rejected/duplicate entry; reference CVE-2018-5381.

CVE-2018-1000066

This CVE-2018-1000066 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-1000063

CVE-2018-1000063 is a reservation duplicate of CVE-2018-5379 for the Quagga BGP daemon (bgpd). CVE-2018-5379: bgpd before 1.2.3 can double‑free memory when processing UPDATE messages containing cluster-list and/or unknown attributes, potentially enabling a denial of service and, in some cases, ar...

SUSE-SU-2018:0384-1 Security update for mariadb

This update for mariadb to version 10.0.33 fixes several issues. These security issues were fixed: - CVE-2017-10378: Vulnerability in subcomponent: Server: Optimizer. Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL...

lighttpd < 1.4.16 Multiple Vulnerabilities

According to its banner, the version of lighttpd running on the remote host is prior to 1.4.16. It is, therefore, affected by multiple vulnerabilities : - modauth allows remote attackers to cause a denial of service via unspecified vectors involving 1 a memory leak, 2 use of md5-sess without a...

UBUNTU-CVE-2017-7516

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-7516

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2017-7516

CVE-2017-7516 is a duplicate of CVE-2015-1197 and has been superseded; the related issue affects the cpio tool. The connected documents describe a path traversal vulnerability introduced by reverting patches affecting --no-absolute-filenames, enabling an attacker to write to arbitrary files via a...

CVE-2017-7516

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1197. Reason: This candidate is a duplicate of CVE-2015-1197. Notes: All CVE users should reference CVE-2015-1197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usag...

PT-2018-8395 · Canonical +2 · Cpio

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific issue. It appears to be related to the management of vulnerability identifiers, indicating that a particula...

CVE-2018-6308

Multiple SQL injections exist in SugarCRM Community Edition 6.5.26 and below via the track parameter to modules\Campaigns\Tracker.php and modules\Campaigns\utils.php, the defaultcurrencyname parameter to modules\Configurator\controller.php and modules\Currencies\Currency.php, the duplicate...

CVE-2017-1000500

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-12161. Reason: This candidate is a reservation duplicate of CVE-2017-12161. Notes: All CVE users should reference CVE-2017-12161 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2018-5191

CVE-2018-5191 is a reservation duplicate of CVE-2017-1000479 and not a separate vulnerability entry. CVE-2017-1000479 affects pfSense versions 2.4.1 and lower, exposing a clickjacking vulnerability in the CSRF error page that can lead to privileged code execution because the check occurs before a...

CVE-2017-1000436

CVE-2017-1000436 is a reservation duplicate of CVE-2017-14975. The connected records show CVE-2017-14975 as a NULL pointer dereference in FoFiType1C.cc in Poppler 0.59.0 (CVE-2017-14975), exploitable via a crafted PDF and capable of causing a denial of service. Public advisories (openSUSE-2018-64...