CVE-2019-1000048

CVE-2019-1000048 is a reservation duplicate of CVE-2013-7469 and is not a separate active vulnerability entry. Connected records describe Seafile (through 6.2.11) using the same Initialization Vector in CBC mode for encrypting private data, enabling potential chosen-plaintext/dictionary attacks. ...

Squid Proxy SNMP Query Rejection Denial of Service

A denial-of-service vulnerability has been reported in the SNMP component of Squid Proxy. The vulnerability is due to a memory leak in SNMP query rejection code. A remote attacker can exploit this vulnerability by sending a large number of SNMP queries to the target system...

CVE-2018-2337

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-2169

This CVE-2018-2169 entry is rejected per the initial description.

CVE-2018-2145

CVE-2018-2145 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-2090

This CVE entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2018-2293

CVE-2018-2293 entry is rejected/not used; does not represent an active vulnerability per initial description.

CVE-2018-2083

CVE-2018-2083 entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-7018

CVE-2018-7018 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-7003

This CVE entry is rejected/not used and does not represent an active vulnerability.

CVE-2018-10156

CVE-2018-10156 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2018-19270

CVE-2018-16276 describes a Linux kernel flaw in the yurex_read function located in drivers/usb/misc/yurex.c, with exploitation possible on affected kernels prior to 4.17.7 due to inadequate bounds checking in the USB driver. The vulnerability can allow a local attacker to crash the kernel or esca...

CVE-2017-5733

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

openSUSE Security Update : libressl (openSUSE-2018-953)

This update for libressl to version 2.8.0 fixes the following issues : Security issues fixed : - CVE-2018-12434: Avoid a timing side-channel leak when generating DSA and ECDSA signatures. boo1097779 - Reject excessively large primes in DH key generation. - CVE-2018-8970: Fixed a bug in...

CVE-2018-10842

CVE-2018-10842 is a duplicate of CVE-2018-10912. The issue is an infinite loop in session replacement in Keycloak before 4.0.0.final, which can cause Denial of Service in multi-node clusters via mishandled expired sessions. Affected component: Keycloak core/session handling. Remediation: upgrade ...

CVE-2018-14680

An issue was discovered in mspack/chmd.c in libmspack before 0.7alpha. It does not reject blank CHM filenames...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...

CVE-2018-1000522

CVE-2018-1000522 is a reservation duplicate of CVE-2018-10364 and, per linked records, relates to a Cross-Site Scripting issue in BigTree CMS prior to version 4.2.22. The root cause is an XSS vulnerability on the Users management page via the name or company field. Affected product: BigTree CMS; ...