5508 matches found
CVE-2023-3117
Duplicate of CVE-2023-3390...
CVE-2023-3117
Rejected reason: Duplicate of CVE-2023-3390...
Open redirect
Rejected reason: Duplicate of CVE-2023-3390...
UBUNTU-CVE-2023-3117
Rejected reason: Duplicate of CVE-2023-3390...
CVE-2023-3117
CVE-2023-3117 is a duplicate of CVE-2023-3390. The connected advisories describe CVE-2023-3390 as a use-after-free vulnerability in the Linux kernel nf_tables/nf_tables_api.c (netfilter) involving NFT_MSG_NEWRULE, enabling local privilege escalation in systems with CAP_NET_ADMIN. Remediation in t...
Duplicate Transactions
code.vegaprotocol.io/vega is vulnerable to Duplicate Transactions. The vulnerability allows an attacker to trick a validator node into processing duplicate transactions, resulting in 50x deposit amount...
CVE-2023-3327
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
WordPress Duplicate Post Page Menu & Custom Post Type Plugin <= 2.4.1 is vulnerable to Broken Access Control
Software Duplicate Post Page Menu & Custom Post Type Type Plugin Vulnerable versions = 2.4.1 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-36526 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID be002a065247 Credits...
PT-2023-24254 · Undefined · Undefined
‼ CVE-2023-3327 ‼ REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been...
CVE-2023-35170
Rejected reason: This CVE is a duplicate of another CVE...
Open redirect
Rejected reason: This CVE is a duplicate of another CVE...
CVE-2023-35170
CVE-2023-35170 is a duplicate entry for Sliver Cryptography issue described across multiple sources. The connected data identifies affected software: Sliver up to version 1.5.39, with improper cryptographic implementation enabling a Man-in-the-Middle (MitM) attack on implants when an attacker can...
CVE-2020-23064
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2020-23066
Rejected reason: DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...
UBUNTU-CVE-2020-23064
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-11023. Reason: This candidate is a duplicate of CVE-2020-11023. Notes: All CVE users should reference CVE-2020-11023 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...
UBUNTU-CVE-2020-23066
REJECT DO NOT USE THIS CVE ID NUMBER. Consult IDs: CVE-2020-17480. Reason: This CVE Record is a duplicate of CVE-2020-17480. Notes: All CVE users should reference CVE-2020-17480 instead of this record...
CVE-2020-23066
Removed by vendor...
CVE-2023-35163 Vega's validators able to submit duplicate transactions
Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For exampl...
CVE-2023-35163 Vega's validators able to submit duplicate transactions
Vega is a decentralized trading platform that allows pseudo-anonymous trading of derivatives on a blockchain. Prior to version 0.71.6, a vulnerability exists that allows a malicious validator to trick the Vega network into re-processing past Ethereum events from Vega’s Ethereum bridge. For exampl...
Duplicate Advisory: Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk
Withdrawn This advisory has been withdrawn because it is a duplicate of GHSA-j2cr-jc39-wpx5. This link is maintained to preserve external references. Original Description The cosmos-sdk module is affected by the vulnerability codenamed "Barberry"...