PT-2017-12891

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the RSVP parser, specifically in the rsvp obj print function within print-rsvp.c. Recommendations For versions prior to 4.9.2, update to version 4.9.2 or...

CVE-2017-1000123

CVE-2017-1000123 is a reservation duplicate of CVE-2017-12425. Connected records provide concrete details for CVE-2017-12425: a denial-of-service vulnerability in Varnish (Varnish Cache) caused by a faulty if statement in varnishd that can trigger an assertion when processing invalid client reque...

CVE-2017-1000162

CVE-2017-1000162 is rejected and not used; reference CVE-2017-12474/12475/12476.

CVE-2017-1000202

CVE-2017-1000202 is a reserved/duplicate entry; refer to CVE-2017-12933.

CVE-2017-1000205

CVE-2017-1000205 is rejected; reference CVE-2017-9091 instead.

CVE-2017-1000216

CVE-2017-1000216 is a reservation duplicate of CVE-2017-11104 and should reference CVE-2017-11104. The active vulnerability is CVE-2017-11104 in Knot DNS: versions 2.4.x prior to 2.4.5 and 2.5.x prior to 2.5.2 contain a TSIG authentication bypass due to an improper TSIG validity period check. Exp...

CVE-2017-1000177

CVE-2017-1000177 is a reservation/duplicate of CVE-2017-11097. The connected records describe the underlying issue as: SWFTools 0.9.2 processes a crafted SWF file in swfc, causing a NULL pointer dereference in dict_lookup() in lib/q.c. This is the same vulnerability tracked under CVE-2017-11097; ...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...

CVE-2017-9767

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...

PT-2017-19173

Name of the Vulnerable Software and Affected Versions Quali CloudShell versions prior to 8 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via several parameters,...

CVE-2017-9767: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the 1 Name or 2 Description parameter to RM/Reservation/ReserveNew; the 3 Description parameter to RM/Topology/Update; the 4 Name, 5...

Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross Site Scripting Vulnerability

Exploit for windows platform in category web applications Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767...

Quali CloudShell 7.1.0.6508 (Patch 6) Cross Site Scripting

Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...

Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting

Quali CloudShell 7.1.0.6508 Patch 6 - Persistent Cross-Site Scripting Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767...

Quali CloudShell 7.1.0.6508 (Patch 6) - Persistent Cross-Site Scripting

Vulnerability type: Multiple Stored Cross Site Scripting Vendor: Quali Product: CloudShell Affected version: v7.1.0.6508 Patch 6 Patched version: v8 and up Credit: Benjamin Lee CVE ID: CVE-2017-9767 ========================================================== Overview Quali CloudShell v7.1.0.6508...

CVE-2011-4933

CVE-2011-4933 is rejected; use CVE-2012-0819 instead.

CVE-2011-4935

CVE-2011-4935 is a reservation duplicate of CVE-2012-0821. Connected records show the concrete issue: Joomla! 1.6.x and 1.7.x before 1.7.4 allows remote attackers to obtain sensitive information via unknown vectors (unspecified vulnerability). This entry is linked to CVE-2012-0821, which document...

CVE-2011-4936

CVE-2011-4936 is rejected/not used; refer to CVE-2012-0822.

CVE-2012-2323

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2214. Reason: This candidate is a reservation duplicate of CVE-2012-2214. Notes: All CVE users should reference CVE-2012-2214 instead of this candidate. All references and descriptions in this candidate have been removed to...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-3552. Reason: This candidate is a reservation duplicate of CVE-2010-3552. Notes: All CVE users should reference CVE-2010-3552 instead of this candidate. All references and descriptions in this candidate have been removed to...