5521 matches found
CVE-2015-8176
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-8176. Reason: This candidate is a duplicate of CVE-2014-8176. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-8176 instead of this candidate. All references and descriptions in this...
CVE-2015-8176
CVE-2015-8176 is rejected/not used and does not represent an active vulnerability entry; use CVE-2014-8176.
CVE-2015-2723
CVE-2015-2723 is a duplicate of CVE-2015-4000 and is not the active vulnerability entry.
CVE-2015-6593
CVE-2015-6593 is rejected/not used; reference CVE-2014-6593 instead.
CVE-2015-0191
CVE-2015-0191 is a duplicate of CVE-2014-0191. Connected records confirm the vulnerability affects libxml2 (before 2.9.2) where XML external parameter entities could be loaded regardless of substitution/validation, enabling potential DoS or information leakage via crafted XML. The issue stems fro...
CVE-2015-8146
CVE-2014-8146 affects ICU4C (Unicode Bidirectional Algorithm) prior to 55.1; the resolveImplicitLevels in common/ubidi.c fails to track directionally isolated text pieces, enabling remote DoS via a heap-based buffer overflow and potentially arbitrary code execution. Remediation in the connected d...
CVE-2015-2235
CVE-2015-2235 is rejected and not used; this entry does not represent an active vulnerability.
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-0607. Reason: This candidate is a duplicate of CVE-2015-0607. The wrong ID was used. Notes: All CVE users should reference CVE-2015-0607 instead of this candidate. All references and descriptions in this candidate have been...
SuSE 11.3 Security Update : php53 (SAT Patch Number 10313)
PHP 5.3 was updated to fix three security issues : - Use-after-free vulnerability allowed remote attackers to execute arbitrary code via a crafted unserialize call that leveraged improper handling of duplicate keys within the serialized properties of an object. bnc910659. CVE-2014-8142 -...
CVE-2015-2010
CVE-2015-0010 is detailed in connected records as a Windows kernel-mode driver vulnerability in cng.sys (CryptProtectMemory). The issue arises when CRYPTPROTECTMEMORY_SAME_LOGON does not validate the impersonation token level, allowing local users to bypass decryption restrictions by abusing a se...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7169. Reason: This candidate is a duplicate of CVE-2014-7169. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-7169 instead of this candidate. All references and descriptions in this...
CVE-2015-0246
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-1493. Reason: This candidate is a reservation duplicate of CVE-2015-1493. Notes: All CVE users should reference CVE-2015-1493 instead of this candidate. All references and descriptions in this candidate have been removed to...
kernel: net: sctp: fix panic on duplicate ASCONF chunks
A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled duplicate Address Configuration Change Chunks ASCONF. A remote attacker could use either of these flaws to crash the system...
Design/Logic Flaw
Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate...
UBUNTU-CVE-2015-0231
Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate...
kernel: net: sctp: fix panic on duplicate ASCONF chunks
A flaw was found in the way the Linux kernel's Stream Control Transmission Protocol SCTP implementation handled duplicate Address Configuration Change Chunks ASCONF. A remote attacker could use either of these flaws to crash the system...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-6271. Reason: This candidate is a duplicate of CVE-2014-6271. A typo caused the wrong ID to be used. Notes: All CVE users should reference CVE-2014-6271 instead of this candidate. All references and descriptions in this...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2354. Reason: This candidate is a duplicate of CVE-2014-2354. The wrong ID was used. Notes: All CVE users should reference CVE-2014-2354 instead of this candidate. All references and descriptions in this candidate have been...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-2352. Reason: This candidate is a duplicate of CVE-2014-2352. The wrong ID was used. Notes: All CVE users should reference CVE-2014-2352 instead of this candidate. All references and descriptions in this candidate have been...