tcpdump buffer overflow vulnerability (CNVD-2019-40787)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in the 'rsvpobjprint' function in the print-rsvp.c file of the RSVP parser in versions prior to...

CVE-2007-2841

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3947. Reason: This candidate is a reservation duplicate of CVE-2007-3947. Notes: All CVE users should reference CVE-2007-3947 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2007-2841

CVE-2007-2841 is rejected and not an active vulnerability entry; reference CVE-2007-3947 instead.

U.S. Government, Military Personnel Data Leaked By Autoclerk

A leaky database owned by reservations management system Autoclerk has exposed the personal data and travel information for thousands of users – including U.S. government and military personnel. Autoclerk, which was acquired by the Best Western Hotel and Resorts Group in August, provides...

CVE-2019-3025

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality RES 3700. While the...

Starbucks: China - IDOR on Reservation Staging/Non Production Site - https://reservation.stg.starbucks.com.cn

xmfc discovered that the staging/non production site at https://reservation.stg.starbucks.com.cn/api/customer/reservation/history allowed anyone to retrieve fabricated test user reservation data by providing a OTP of 111111. @xmfc — thank you for reporting this vulnerability and for confirming th...

Schneider Electric Modicon M580 UMAS REST API getcominfo denial-of-service vulnerability

Summary An exploitable denial of service vulnerability exists in the UMAS REST API getcominfo functionality of the Schneider Electric Modicon M580 Programmable Automation Controller firmware version SV2.80. A specially crafted HTTP request can cause the device to enter a non-recoverable fault...

CVE-2019-6745

CVE-2019-6745 entry is rejected and not used.

CVE-2018-17557

The connected documents describe a security issue in the WordPress plugin Advanced Custom Fields (ACF) prior to version 5.7.8, with an XSS vulnerability in authors. Affected product: WordPress ACF plugin

CVE-2017-18394

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2019-14361

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2019-14361

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2019-1000033

CVE-2019-1000033 is a reservation duplicate of CVE-2019-1010259 and has no separate technical details in this set. Connected records provide concrete data for CVE-2019-1010259: SaltStack Salt 2018.3, 2019.2 are affected by a SQL Injection in the mysql.user_chpass function of the Salt MySQL module...

CVE-2019-1010129

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010127. Reason: This candidate is a reservation duplicate of CVE-2019-1010127. Notes: All CVE users should reference CVE-2019-1010127 instead of this candidate. All references and descriptions in this candidate have been...

UBUNTU-CVE-2019-1010129

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010127. Reason: This candidate is a reservation duplicate of CVE-2019-1010127. Notes: All CVE users should reference CVE-2019-1010127 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2019-1010224

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2019-1010223

CVE-2019-1010223 is rejected/not used; reference CVE-2018-19800 instead.

CVE-2019-1010262

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been...

UBUNTU-CVE-2019-1010262

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2019-1010309

CVE-2019-1010309 is a reserved duplicate of CVE-2019-9686 and should not be used as an active vulnerability entry. Connected data confirms the underlying issue: pacman before 5.1.3 allows directory traversal when installing a remote package via a URL (pacman -U ) due to an unsanitized Content-Dis...