CVE-2017-1000019

CVE-2017-5938 describes a Cross-site Scripting (XSS) vulnerability in the nav_path function of ViewVC (lib/viewvc.py). It allows remote attackers to inject arbitrary web script or HTML via the nav_data name. Affected versions are ViewVC before 1.0.14 and 1.1.x before 1.1.26. The issue is fixed in...

CVE-2017-8784

CVE-2017-8784 is a reservation duplicate of CVE-2017-7263. The connected documents confirm Potrace 1.14 has a heap-based buffer over-read in bm_readbody_bmp when processing BMP images, enabling denial of service. Fedora advisories indicate a later Potrace release (1.15) addressing this family of ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9861. Reason: This candidate is a reservation duplicate of CVE-2016-9861. Notes: All CVE users should reference CVE-2016-9861 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9851. Reason: This candidate is a reservation duplicate of CVE-2016-9851. Notes: All CVE users should reference CVE-2016-9851 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9865. Reason: This candidate is a reservation duplicate of CVE-2016-9865. Notes: All CVE users should reference CVE-2016-9865 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9849. Reason: This candidate is a reservation duplicate of CVE-2016-9849. Notes: All CVE users should reference CVE-2016-9849 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9848. Reason: This candidate is a reservation duplicate of CVE-2016-9848. Notes: All CVE users should reference CVE-2016-9848 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9862. Reason: This candidate is a reservation duplicate of CVE-2016-9862. Notes: All CVE users should reference CVE-2016-9862 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9863. Reason: This candidate is a reservation duplicate of CVE-2016-9863. Notes: All CVE users should reference CVE-2016-9863 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9858, CVE-2016-9859, CVE-2016-9860. Reason: This candidate is a reservation duplicate of CVE-2016-9858, CVE-2016-9859, and CVE-2016-9860. Notes: All CVE users should reference CVE-2016-9858, CVE-2016-9859, and/or CVE-2016-986...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-9856, CVE-2016-9857. Reason: This candidate is a reservation duplicate of CVE-2016-9856 and CVE-2016-9857. Notes: All CVE users should reference CVE-2016-9856 and/or CVE-2016-9857 instead of this candidate. All references and...

CVE-2016-1000361

CVE-2016-1000361 is a reservation/duplicate of CVE-2016-9848 for phpMyAdmin. The connected records confirm the underlying issue: in phpMyAdmin, phpinfo (phpinfo.php) exposes values of HttpOnly cookies, affecting all 4.6.x versions prior to 4.6.5, all 4.4.x versions prior to 4.4.15.9, and all 4.0....

CVE-2016-1000362

CVE-2016-1000362 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-1000369

CVE-2016-1000369 is a reservation duplicate of CVE-2016-9862 and is not the active vulnerability entry. Connected records show phpMyAdmin multiple vulnerabilities affecting 4.0.x (<4.0.10.18), 4.4.x (<4.4.15.9), and 4.6.x (= 4.6.5.1. Exploitation details are not provided in these documents....

CVE-2016-1000364

CVE-2016-1000364 is rejected/not used; reference CVE-2016-9851 instead.

CVE-2016-1000367

CVE-2016-1000367 is rejected and not an active vulnerability entry; reference CVE-2016-9858/9859/9860.

CVE-2016-1000366

This CVE-2016-1000366 entry is rejected/not used; please reference CVE-2016-9856 and/or CVE-2016-9857.

CVE-2016-1000363

CVE-2016-1000363 is rejected/not used; refer to CVE-2016-9850 instead.

CVE-2016-1000373

CVE-2016-9866 concerns phpMyAdmin and describes that when the arg_separator is not the default “&”, the CSRF token is not properly stripped from the return URL of the preference import action. Affected releases include 4.6.x prior to 4.6.5, 4.4.x prior to 4.4.15.9, and 4.0.x prior to 4.0.10.18. T...

CVE-2016-1000370

This entry (CVE-2016-1000370) is a reservation duplicate of CVE-2016-9863 and does not introduce a new vulnerability. CVE-2016-9863 describes a Denial of Service in phpMyAdmin caused by using a very large request to the table partitioning function, affecting all 4.6.x versions prior to 4.6.5. The...