5934 matches found
CVE-2006-0018
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3899. Reason: This candidate is a duplicate of CVE-2005-3899. Notes: All CVE users should reference CVE-2005-3899 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-3898
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3567. Reason: This candidate is a reservation duplicate of CVE-2005-3567. Notes: All CVE users should reference CVE-2005-3567 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2006-0018
Summary: CVE-2005-3899 (Google Talk) describes a vulnerability in the automatic update feature where remote attackers can poison a target's DNS cache and cause a large update file to be sent, triggering CPU and memory exhaustion during signature verification (BenjiBug). The related entry CVE-2006...
CVE-2005-3637
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3530. Reason: This candidate is a duplicate of CVE-2005-3530. Notes: All CVE users should reference CVE-2005-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2002-2160
Summary: CVE-2002-2160 is a duplicate of CVE-2002-1798 (DO NOT USE THIS CANDIDATE NUMBER). The connected records describe the underlying issue in MidiCart PHP, PHP Plus, and PHP Maxi. Affected software (as documented): MidiCart PHP, PHP Plus, and PHP Maxi. Vulnerability details (from connected CV...
CVE-2005-3637
CVE-2005-3637 is a duplicate of CVE-2005-3530 and is not a separate active entry. Connected data show CVE-2005-3530 documents a Cross-site scripting (XSS) vulnerability in Antville 1.1 that allows remote injection of arbitrary web script/HTML via the notfound.skin error document. Affected version...
CVE-2002-2147
CVE-2002-2147 is a duplicate of CVE-2002-1828. The exposed detail confirms Savant Webserver 3.1 is affected: remote attackers can crash the server by sending an HTTP GET request with a negative Content-Length value, causing a denial of service. This is supported by CVE records and OpenVAS/Nessus ...
CVE-2002-2136
CVE-2002-2136 is rejected/not used; duplicate of CVE-2002-1590.
CVE-2002-2135
CVE-2002-2135 is a duplicate of CVE-2002-1618. The connected CVE-2002-1618 describes a vulnerability in HP-UX JFS/JFS3.1 and OnlineJFS where the sticky bit is not properly enforced on JFS filesystems (HP-UX 10.20, 11.00, 11.04), potentially allowing attackers to bypass filesystem-restrictions. Th...
CVE-2002-2157
CVE-2002-1660 affects calendar.php in vBulletin prior to 2.2.0, allowing remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. This represents the concrete vulnerability detail referenced by CVE-2002-2157 via duplication; CVE-2157 is a duplicate and poi...
CVE-2002-2194
CVE-2002-2194 is a duplicate of CVE-2002-1589. The connected CVE-2002-1589 describes Solaris 8 vulnerability where the 0x02 bit (TEST, KMF_DEADBEEF, or deadbeef) in kmem_flags enables local users to trigger a denial of service (system panic). No exploitation status or patch details are provided i...
CVE-2005-3561
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2954. Reason: This candidate is a reservation duplicate of CVE-2005-2954. Notes: All CVE users should reference CVE-2005-2954 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2005-3563
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2956. Reason: This candidate is a duplicate of CVE-2005-2956. Notes: All CVE users should reference CVE-2005-2956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2005-3562
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2955. Reason: This candidate is a reservation duplicate of CVE-2005-2955. Notes: All CVE users should reference CVE-2005-2955 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2005-3542
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3508. Reason: This candidate is a reservation duplicate of CVE-2005-3508. Notes: All CVE users should reference CVE-2005-3508 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2005-3563
CVE-2005-3563 is a duplicate of CVE-2005-2956. Connected records describe the actual issue under CVE-2005-2956: ATutor 1.5.1 (and possibly earlier) stores temporary chat logs under the web document root with insufficient access control and predictable filenames, allowing remote attackers to obtai...
CVE-2005-3561
CVE-2005-3561 is rejected/not used; reference CVE-2005-2954 instead.
CVE-2005-3562
ATutor 1.5.1 (and possibly earlier) is affected by CVE-2005-2955 due to an incomplete blacklist that checks file extensions for uploads. This allows authenticated users to execute arbitrary code by uploading files with dangerous extensions (e.g., .inc, .php4, etc.). The CVE-2005-3562 entry is a r...
CVE-2005-3362
This CVE entry is rejected/not used; refer to CVE-2005-3153.
CVE-2005-3362
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3153. Reason: This candidate is a reservation duplicate of CVE-2005-3153. Notes: All CVE users should reference CVE-2005-3153 instead of this candidate. All references and descriptions in this candidate have been removed to...