3088 matches found
CVE-2017-1892
CVE-2017-1892 is rejected; this CVE ID is not used.
CVE-2017-2078
CVE-2017-2078 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-2042
CVE-2017-2042 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-16998
CVE-2017-16998 is rejected; this CVE entry is not an active vulnerability.
CVE-2017-15560
CVE-2017-15560 is rejected/not used and does not represent an active vulnerability entry.
await vs return vs return await
When writing async functions, there are differences between await vs return vs return await, and picking the right one is important. Let's start with this async function: async function waitAndMaybeReject // Wait one second await new Promiser = setTimeoutr, 1000; // Toss a coin const isHeads =...
CVE-2017-16875
An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...
Design/Logic Flaw
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2016. Notes: none...
CVE-2012-2456
CVE-2012-2456 is rejected/not used and does not represent an active vulnerability entry.
CVE-2017-13826
CVE-2017-13826 is a reservation duplicate of CVE-2017-10140 and has no separate vulnerability details. The connected records provide concrete information for CVE-2017-10140: Postfix before 2.11.10, 3.0.x before 3.0.10, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 may allow local users to gain privi...
CVE-2017-16672
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully...
DEBIAN-CVE-2017-16672
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully...
UBUNTU-CVE-2017-16672
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully...
IEEE P1735 Cryptographic Issue Vulnerability (CNVD-2017-33397)
IEEE P1735 is a standard dedicated to encrypting the intellectual property of electronic designs. The implementation of IEEE P1735 is vulnerable to a cryptographic issue. An attacker could use this vulnerability to modify the license rejection response against an authorized license...
Poppler memory corruption vulnerability (CNVD-2017-27306)
Poppler is a C++ class library for generating PDF, the library is inherited from Xpdf PDF reader. A memory corruption vulnerability exists in the call to Object::streamGetChar in the Object.h file of Poppler version 0.59.0. An attacker can exploit this vulnerability to cause a rejection error...
Updated jetty packages fix security vulnerability
Jetty is prone to a timing channel attack in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords CVE-2017-9735...
CVE-2017-7789
If a server sends two Strict-Transport-Security STS headers for a single connection, they will be rejected as invalid and HTTP Strict Transport Security HSTS will not be enabled for the connection. This vulnerability affects Firefox 55...
Artificial Inteligent Packet Inspection Engine: AIEngine
AIEngine is a next generation interactive/programmable Python/Ruby/Java packet inspection engine with capabilities of learning without any human intervention, NIDS Network Intrusion Detection System functionality, DNS domain classification, network collector, network forensics and many others...