CVE-2016-1000368

CVE-2016-1000368 is rejected/not used per Initial Description; please reference CVE-2016-9861.

CVE-2016-1000365

CVE-2016-1000365 is rejected and not used as a candidate.

CVE-2016-1000371

CVE-2016-1000371 is a reservation duplicate of CVE-2016-9864. The connected documents describe a phpMyAdmin vulnerability (CVE-2016-9864) involving SQL injection in the tracking functionality that could grant read/write access to the configuration storage and, depending on privileges, to the MySQ...

CVE-2017-5917

CVE-2017-5917 is a reserved/duplicate entry and references CVE-2017-3213. Connected sources detail that the Think Mutual Bank Mobile Banking app (iOS) up to version 3.1.5 fails to validate X.509 SSL certificates, enabling MITM attacks and potential exposure of sensitive data. The related CVE-2017...

IBM MQ 8.x < 8.0.0.3 Multiple Information Disclosure (credentialed check)

The version of IBM MQ formerly IBM WebSphere MQ 8.x installed on the remote Windows host is missing fix pack 8.0.0.3 or later. It is, therefore, affected by the following vulnerabilities : - A flaw exists in the Advanced Message Security policy when a JMS client application sends a message to the...

CVE-2017-5437

CVE-2017-5437 is rejected/not used; refer to CVE-2016-10195/10196/10197 instead.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5483

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-3600. Reason: This candidate is a reservation duplicate of CVE-2017-3600. Notes: All CVE users should reference CVE-2017-3600 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2016-5483

CVE-2016-5483 concerns MySQL 5.5 (mysql/mysqldump) where newline characters in database/table names were not handled safely. A privileged user could cause a restoration of a mysqldump backup to execute arbitrary shell or SQL commands. Remediation: upgrade to upstream MySQL 5.5.55 (as in Debian DS...

CVE-2016-5483

Disclaimer: This data contains information about vulnerable...

CVE-2015-7572

CVE-2015-7572 is a duplicate of CVE-2013-0237 and is not a distinct vulnerability entry. Connected records show the underlying issue is a cross-site scripting (XSS) vulnerability in Plupload.as used by WordPress and other products, where an attacker can inject arbitrary script via the id paramete...

CVE-2017-5181

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-7692. Reason: This candidate is a reservation duplicate of CVE-2017-7692. Notes: All CVE users should reference CVE-2017-7692 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2017-5181

CVE-2017-7692 affects SquirrelMail webmail (

CVE-2017-5437

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of...

UBUNTU-CVE-2017-5437

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197...

CVE-2017-5437

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197...

Mail.ru: Дубликат: https://hackerone.com/reports/219171 (доступ к аккаунту, через сброс пароля)

duplicate: https://hackerone.com/reports/219171...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10326. Reason: This candidate is a reservation duplicate of CVE-2016-10326. Notes: All CVE users should reference CVE-2016-10326 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2016-1000259

CVE-2016-1000259 is rejected/not used and does not represent an active vulnerability entry; consult CVE-2016-10326.

HackerOne: Race condition leads to duplicate payouts

@jigarthakkar39 discovered a race condition issue with some recent changes to our payments code that caused him to be able to receive duplicate payouts for some bounties. A number of variables and timing had to be just right for it to actually allow a malicious actor to exploit this and receive...