CVE-2011-4779

CVE-2011-4642 affects Splunk Web (Splunk 4.2.x before 4.2.5). The mappy.py component allows remote authenticated admins to execute arbitrary code via the sys module in a crafted request to the search app, enabling CSRF-like abuse. Upgrade to Splunk 4.2.5 or later. Note: CVE-2011-4779 is a reserva...

Unbound multiple denial-of-service vulnerabilities

Overview A specially crafted DNS query containing signed duplicate resource records or a malformed NSEC3 signed resource record may cause Unbound to crash. Description NLnetLabs advisory states:== Description 1: crash on signed duplicate Resource Records There are authoritative servers that...

CVE-2011-4323

CVE-2011-4323 is a duplicate of CVE-2011-2726 (Drupal 7.x before 7.5). The connected data confirms an access bypass: non-privileged users can download a file attached to a comment if they know or guess the direct URL, even when the parent node is denied access, provided file upload fields or priv...

CVE-2011-3633

CVE-2011-3633 is rejected/not used per the Initial Description.

CVE-2011-4331

CVE-2011-4331 is rejected and should not be used; use CVE-2011-4110 instead.

CVE-2011-2708

This CVE-2011-2708 entry is rejected/not used and should reference CVE-2011-2710.

kernel: taskstats: duplicate entries in listener mode can lead to DoS

The adddellistener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers, which allows local users to cause a denial of service memory and CPU consumption, and bypass the OOM Killer, via a crafted application...

CVE-2011-3867

CVE-2011-3867 is rejected; reference CVE-2011-2998 instead.

Enterprise Manager shows duplicate jobs

Challenge After moving the Veeam server to another server the jobs tab of the Backup Enterprise Manger still shows the jobs from the previous Backup server. Cause Information about the old backup server still remains in VeeamBackupReporting database. Solution To correct this: 1. Go to the...

CVE-2004-2770

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-3389. Reason: This candidate is a duplicate of CVE-2011-3389. Notes: All CVE users should reference CVE-2011-3389 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2004-2770

CVE-2004-2770 is a duplicate of CVE-2011-3389. The connected documents describe CVE-2011-3389, a vulnerability in SSL 3.0 and TLS 1.0 CBC-mode handling that can allow an attacker to recover portions of plaintext. Reports and advisories show mitigations and fixes across vendors: Mitigation: in som...

WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress MM Duplicate plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-duplicate.zip Version: 1.2 tested --- PoC ---...

WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress MM Duplicate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- class mmduplicatepagesposts ... function mmduplicatepagesposts ... addaction'init', array&$this,...

CVE-2011-2810

CVE-2011-2810 is rejected/not used; reference CVE-2011-0253 instead.

Duplicate e-mail notifications sent when a backup or replication job is completed.

When your backup or replication job is completed, you receive duplicate e-mail notifications...

ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability

ZDI-11-239: Apple Safari Webkit FrameOwner Element Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-239 July 27, 2011 -- CVE ID: CVE-2011-0233 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple WebKit --...

logout.action is not protected against XSRF

This is a duplicate of CONF-21758. Please only resolve this ticket when CONF-21758 is fixed...

CVE-2011-1501

CVE-2011-1501 is rejected/not used; refer to CVE-2011-1571.

DEBIAN-CVE-2010-4767

Open Ticket Request System OTRS before 2.3.6 does not properly handle e-mail messages in which the From line contains UTF-8 characters associated with diacritical marks and an invalid charset, which allows remote attackers to cause a denial of service duplicate tickets and duplicate auto-response...

CVE-2011-0745

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover 1 the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or 2 t...