3092 matches found
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...
CVE-2018-1000522
CVE-2018-1000522 is a reservation duplicate of CVE-2018-10364 and, per linked records, relates to a Cross-Site Scripting issue in BigTree CMS prior to version 4.2.22. The root cause is an XSS vulnerability on the Users management page via the name or company field. Affected product: BigTree CMS; ...
CVE-2018-10849
CVE-2018-12533 is a RichFaces EL-injection vulnerability in Red Hat JBoss RichFaces 3.1.0–3.3.4 that allows remote, unauthenticated attackers to inject EL expressions and execute arbitrary Java code via a crafted /DATA/ path in a Paint2DResource.ImageData object (RF-14310). The CVE-2018-10849 ent...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10531. Reason: This candidate is a reservation duplicate of CVE-2016-10531. Notes: All CVE users should reference CVE-2016-10531 instead of this candidate. All references and descriptions in this candidate have been removed t...
CVE-2018-3617
Intel Integrated Performance Primitives (IPP) Cryptography Library prior to version 2018 U3.1 is vulnerable to information disclosure due to not guaranteeing constant execution time. Exploitation could reveal sensitive data. Affected components are multiple IPP crypto implementations. Mitigation:...
CVE-2018-1000157
CVE-2018-1000157 is a reservation duplicate of CVE-2018-9092. Connected records provide concrete details for the underlying issue in MiniCMS 1.10: a Cross-Site Request Forgery in mc-admin/conf.php that can change the administrator password. Affected software: MiniCMS 1.10. Root cause: CSRF in adm...
CVE-2018-9317
CVE-2018-9313 describes a vulnerability in BMW i/X/3/5/7 series Head Unit HU_NBT (Infotainment) from 2012–2018. A remote Bluetooth attack, usable when in pairing mode, could reboot the Head Unit. Affected component: HU_NBT Infotainment; impact: head unit reboot per description. Vulnerability deta...
CVE-2017-4784
CVE-2017-4784 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2017-4432
CVE-2017-4432 is rejected/not used per the Initial Description.
CVE-2017-4039
This CVE entry is rejected/not used as stated in the initial description.
CVE-2017-4734
CVE-2017-4734 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2017-4250
CVE-2017-4250 entry is rejected/not used; this CVE ID does not represent an active vulnerability entry.
CVE-2017-4134
CVE-2017-4134 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2017-4259
This CVE entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-4490
CVE-2017-4490 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-4563
This CVE-2017-4563 entry is rejected/not used as stated.