PT-2017-17806

Name of the Vulnerable Software and Affected Versions PivotX version 2.3.11 Description The issue allows remote authenticated Advanced users to execute arbitrary PHP code. This can be achieved by uploading a file with a safe extension, such as .jpg, and then using the duplicate function to change...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10209. Reason: This candidate is a reservation duplicate of CVE-2016-10209. Notes: All CVE users should reference CVE-2016-10209 instead of this candidate. All references and descriptions in this candidate have been removed t...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10226. Reason: This candidate is a reservation duplicate of CVE-2016-10226. Notes: All CVE users should reference CVE-2016-10226 instead of this candidate. All references and descriptions in this candidate have been removed t...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-7510. Reason: This candidate is a reservation duplicate of CVE-2016-7510. Notes: All CVE users should reference CVE-2016-7510 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-1000349

CVE-2016-10209 affects libarchive (archive_wstring_append_from_mbs) with a NULL pointer dereference that can crash the application via specially crafted archives (DoS). Multiple advisories cite this issue within libarchive versions around 3.x. Debian DSA-4360-1 fixes the flaw in stretch, upgradin...

CVE-2016-1000268

This CVE-2016-1000268 entry is rejected/not used and does not represent an active vulnerability.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10211. Reason: This candidate is a reservation duplicate of CVE-2016-10211. Notes: All CVE users should reference CVE-2016-10211 instead of this candidate. All references and descriptions in this candidate have been removed t...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10222. Reason: This candidate is a reservation duplicate of CVE-2016-10222. Notes: All CVE users should reference CVE-2016-10222 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2016-1000348

CVE-2016-1000348 is rejected/not used and does not represent an active vulnerability entry; please reference CVE-2016-10211.

Gratipay: Content-Length restriction bypass to heap overflow in gip.rocks.

I started playing around with a0xnirudh's Content-Length restriction bypass and noticed that when combined with a different vulnerability this could be leveraged to do a bit more than DoS. We decided to open a new ticket to address this issue, since we were already aware of the bypass. a0xnirudh...

CVE-2017-2656

CVE-2016-6320 is a cross-site scripting (XSS) vulnerability in Foreman prior to 1.12.2, exploitable by remote authenticated users via the network interface device identifier in the host interface form (host_edit_interfaces.js). Affected product: Foreman before 1.12.2. Root cause: input handling i...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9606. Reason: This candidate is a duplicate of CVE-2016-9606. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should reference CVE-2016-9606 instead of this candidate. All...

CVE-2016-9571

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9606. Reason: This candidate is a duplicate of CVE-2016-9606. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should reference CVE-2016-9606 instead of this candidate. All...

UBUNTU-CVE-2016-9571

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9606. Reason: This candidate is a duplicate of CVE-2016-9606. Reason: this ID was intended for one issue, but was associated with two issues. Notes: All CVE users should reference CVE-2016-9606 instead of this candidate. All references...

CVE-2016-9571

CVE-2016-9571 is a duplicate of CVE-2016-9606 and does not describe a distinct vulnerability entry. The connected data confirms that CVE-2016-9606 affects JBoss RESTEasy prior to 3.1.2, where YamlProvider could force YAML unmarshalling via Yaml.load(), potentially allowing arbitrary code executio...

CVE-2017-6207

CVE-2017-6207 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-5546

The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service duplicate freelist entries and system crash or possibly have unspecified other impact in opportunistic circumstances by leveraging the selection of a...

Fedora 25 : shotwell (2017-8c3c43cc4f)

This release turns on HTTPS encyption all over the publishing plugins. Users using Tumblr and Yandex.Fotki publishing are strongly advised to change their passwords and reauthenticate Shotwell to those services after upgrade. Users of Picasa and Youtube publishing are strongly advised to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-2971. Reason: This candidate is a reservation duplicate of CVE-2017-2971. Notes: All CVE users should reference CVE-2017-2971 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-9041

CVE-2016-9041 is a reservation duplicate of CVE-2017-2971; CVE-2017-2971 describes an exploitable heap overflow in Adobe Acrobat Reader/Acrobat’s JPEG decoder, enabling arbitrary code execution on affected versions (15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier). No reme...