CVE-2023-45291

reserved but not needed...

CVE-2023-5312

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-43226. Reason: This candidate is a reservation duplicate of CVE-2023-43226. Notes: All CVE users should reference CVE-2023-43226 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2023-5312

CVE-2023-5312 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-21386

CVE-2023-21386 is listed in Android 14 security release notes under the System category with Type “ID” and Moderate severity. The provided connected documents confirm the CVE entry exists, but do not provide the root cause, affected components beyond that category, or remediation details. No expl...

PT-2023-27910 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions prior to 1.14.2 Cilium versions prior to 1.13.7 Cilium versions prior to 1.12.14 Description: An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace can affect traffic on an enti...

CVE-2023-4638

CVE-2023-4638 affects GitLab CE/EE (versions 13.3–16.1.4, 16.2.0–16.2.4, 16.3.0) where an unauthenticated/unauthorized user can fork a project outside of the current group due to improper permission validation. Impact includes potential privilege escalation or access to project data via misrouted...

CVE-2023-33858

CVE-2023-33858 is an cross-site scripting (XSS) vulnerability in IBM Business Automation Workflow. The IBM security bulletins detail that an attacker could embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected products include I...

CVE-2022-43739

IBM Security Verify Access OpenID Connect Provider container is affected by CVE-2022-43739, which could disclose information to a local user via log files, potentially aiding further attacks. Affected product: IBM Security Verify Access OIDC Provider container (all versions). Root cause: informat...

CVE-2023-40270

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-38831. Reason: This candidate is a reservation duplicate of CVE-2023-38831. Notes: All CVE users should reference CVE-2023-38831 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-39977

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-3268. Reason: This candidate is a reservation duplicate of CVE-2023-3268. Notes: All CVE users should reference CVE-2023-3268 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2023-39552

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0527. Reason: This candidate is a reservation duplicate of CVE-2023-0527. Notes: All CVE users should reference CVE-2023-0527 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2202-3602

CVE-2022-3602 is an OpenSSL OpenSSL 3.x risk (X.509 certificate verification buffer overrun). It was addressed by fixes in OpenSSL 3.0.7 and is discussed alongside CVE-2022-3786. Microsoft guidance notes that OpenSSL 3.0.x remains affected until patched; affected products include OpenSSL consumer...

CVE-2104-3465

The connected Mageia advisory MGASA-2014-0248 documents CVE-2104-3465 as a NULL pointer dereference in GnuTLS (gnutls_x509_dn_oid_name()) when parsing X.509 certificates with certain OIDs, potentially returning NULL and enabling a buffer overflow on the client during TLS/SSL handshakes, with a se...

CVE-2016-1000247

CVE-2016-1000247 affects mpg123/libmpg123: a flaw in the id3 tag processing code can cause a buffer over-read leading to a denial of service. Debian and Mageia advisories fix it by updating mpg123 packages (e.g., Debian 1.14.4-1+deb7u1). Ubuntu and OSV/NASL entries also reference the vulnerabilit...

CVE-2015-20170

CVE-2015-20170 concerns the mailcap.findmatch() function in Python where the second argument is not sanitized, enabling shell command injection. The CloudLinux update CLSA-2022:1658347112 states that CVE-2015-20170 has been fixed in Python (via a provided update). The connected document does not ...

CVE-2023-02121

Cisco security advisory CISCO-SA-ADEOS-MLAYECVK documents multiple command injection vulnerabilities in the restricted shell of Cisco EPNM, ISE, and Prime Infrastructure. An authenticated, local attacker could escape the restricted shell and gain root privileges on the underlying OS. Updates have...

CVE-2022-20565

CVE-2022-20565 appears in multiple VMware/EulerOS kernel advisories (EulerOS-SA-2023-2184, EulerOS-SA-2023-2252) and in Nessus/OpenVAS feeds as part of Linux kernel issues. The documents indicate a critical vulnerability affecting the Linux kernel’s Cache Handler (exact affected version and produ...

A malicious user can steal a reserved token by using shift() function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens.

Lines of code Vulnerability details Impact A malicious user can steal a reserved token by using shift function of Well.sol if the well was added liquidity unsafely with zero amount of the one of tokens. Proof of Concept Let's assume the well with WETH and USDC tokens. Currently totalSupply is zer...

CVE-2023-35935

CVE-35935 is a reservation duplicate of CVE-2023-31999. The active vulnerability details concern all versions of @fastify/oauth2 using a statically generated OAuth2 state parameter at startup, reused across requests for all users, enabling CSRF. The issue is fixed in newer releases (e.g., v7.2.0)...

CVE-2023-3327

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-35823. Reason: This candidate is a reservation duplicate of CVE-2023-35823. Notes: All CVE users should reference CVE-2023-35823 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...