CVE-2017-1000233

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session. Affected versions: prior to 6.1.6 and prior to 7.0.3. Remediation: upgrade to OpenProject 6.1.6 or newer, or 7.0.3 or new...

CVE-2017-13826

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-10140. Reason: This candidate is a reservation duplicate of CVE-2017-10140. Notes: All CVE users should reference CVE-2017-10140 instead of this candidate. All references and descriptions in this candidate have been removed t...

Why cache file size of "Cache on device RAM with overflow on hard disk" is growing faster than "Cache on device hard disk"

Cache Type = "Cache on device hard disk" The block reservation of "Cache on device hard disk" is ONLY 4KB, and it's random I/O. Cache Type = "Cache on device RAM with overflow on hard disk" Since "overflow on hard disk" is vhdx format, the block reservation is 2MB & required for sequential I/O,...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-4003. Reason: This candidate is a reservation duplicate of CVE-2016-4003. Notes: All CVE users should reference CVE-2016-4003 instead of this candidate. All references and descriptions in this candidate have been removed to...

DEBIAN-CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

CVE-2017-13048

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

Tcpdump RSVP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.RSVP parser is one of the resource reservation protocol parsers. A...

ICHotelReservation 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

UBUNTU-CVE-2017-13051

The RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvpobjprint...

Hotel Reservation Site Script 3.3 - (key) Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo:...

ICHotelReservation 3.3 - 'key' SQL Injection

Exploit Title: Hotel Reservation Site Script 3.3 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/hotel-reservation-site-script.htm Demo: http://icloudcenter.net/demos/ichotelreservation/ Version: 3.3 Category:...

PT-2017-12891

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

CVE-2017-1000162

CVE-2017-1000162 is rejected and not used; reference CVE-2017-12474/12475/12476.

CVE-2017-1000216

CVE-2017-1000216 is a reservation duplicate of CVE-2017-11104 and should reference CVE-2017-11104. The active vulnerability is CVE-2017-11104 in Knot DNS: versions 2.4.x prior to 2.4.5 and 2.5.x prior to 2.5.2 contain a TSIG authentication bypass due to an improper TSIG validity period check. Exp...

CVE-2017-1000205

CVE-2017-1000205 is rejected; reference CVE-2017-9091 instead.

CVE-2017-1000123

CVE-2017-1000123 is a reservation duplicate of CVE-2017-12425. Connected records provide concrete details for CVE-2017-12425: a denial-of-service vulnerability in Varnish (Varnish Cache) caused by a faulty if statement in varnishd that can trigger an assertion when processing invalid client reque...

CVE-2017-1000202

CVE-2017-1000202 is a reserved/duplicate entry; refer to CVE-2017-12933.

CVE-2017-1000177

CVE-2017-1000177 is a reservation/duplicate of CVE-2017-11097. The connected records describe the underlying issue as: SWFTools 0.9.2 processes a crafted SWF file in swfc, causing a NULL pointer dereference in dict_lookup() in lib/q.c. This is the same vulnerability tracked under CVE-2017-11097; ...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...