CVE-2019-6745

CVE-2019-6745 entry is rejected and not used.

CVE-2018-17557

The connected documents describe a security issue in the WordPress plugin Advanced Custom Fields (ACF) prior to version 5.7.8, with an XSS vulnerability in authors. Affected product: WordPress ACF plugin

CVE-2017-18394

cPanel before 68.0.15 does not have a sufficient list of reserved usernames SEC-327...

CVE-2019-14361

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed t...

UBUNTU-CVE-2019-14361

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2019-1000033

CVE-2019-1000033 is a reservation duplicate of CVE-2019-1010259 and has no separate technical details in this set. Connected records provide concrete data for CVE-2019-1010259: SaltStack Salt 2018.3, 2019.2 are affected by a SQL Injection in the mysql.user_chpass function of the Salt MySQL module...

CVE-2019-1010129

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010127. Reason: This candidate is a reservation duplicate of CVE-2019-1010127. Notes: All CVE users should reference CVE-2019-1010127 instead of this candidate. All references and descriptions in this candidate have been...

UBUNTU-CVE-2019-1010129

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010127. Reason: This candidate is a reservation duplicate of CVE-2019-1010127. Notes: All CVE users should reference CVE-2019-1010127 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2019-1010224

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-19802. Reason: This candidate is a reservation duplicate of CVE-2018-19802. Notes: All CVE users should reference CVE-2018-19802 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2019-1010223

CVE-2019-1010223 is rejected/not used; reference CVE-2018-19800 instead.

CVE-2019-1010262

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been...

UBUNTU-CVE-2019-1010262

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2019-1010309

CVE-2019-1010309 is a reserved duplicate of CVE-2019-9686 and should not be used as an active vulnerability entry. Connected data confirms the underlying issue: pacman before 5.1.3 allows directory traversal when installing a remote package via a URL (pacman -U ) due to an unsanitized Content-Dis...

CVE-2019-1010311

This CVE-2019-1010311 entry is rejected/not used and does not represent an active vulnerability.

Details of the Cloud Hopper Attacks

Reuters has a long article on the Chinese government APT attack called Cloud Hopper. It was much bigger than originally reported. The hacking campaign, known as "Cloud Hopper," was the subject of a U.S. indictment in December that accused two Chinese nationals of identity theft and fraud...

CVE-2018-15878

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-6978. Reason: This candidate is a reservation duplicate of CVE-2019-6978. Notes: All CVE users should reference CVE-2019-6978 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2019-6963

A heap-based buffer overflow in cosadhcpv4dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the...

Heap overflow

A heap-based buffer overflow in cosadhcpv4dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the...

CVE-2019-6963

A heap-based buffer overflow in cosadhcpv4dml.c in the RDK RDKB-20181217-1 CcspPandM module may allow attackers with login credentials to achieve remote code execution by crafting a long buffer in the "Comment" field of an IP reservation form in the admin panel. This is related to the...

Schneider Electric Modicon M580 UMAS release reservation denial-of-service vulnerability

Summary An exploitable denial-of-service vulnerability exists in the UMAS Release PLC Reservation function of the Schneider Electric Modicon M580 Programmable Automation Controller, firmware version SV2.70. A specially crafted UMAS command can cause the device to invalidate a session without...