2142 matches found
DEBIAN-CVE-2018-13099
An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service out-of-bounds memory access and BUG can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr...
Linux kernel denial of service vulnerability (CNVD-2018-12669)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in fs/f2fs/inline.c in 4.17.3 and earlier versions of the Linux kernel. An...
UBUNTU-CVE-2018-13099
An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service out-of-bounds memory access and BUG can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr...
CVE-2018-10848
CVE-2018-10848 is a reserved duplicate of CVE-2018-12532; the connected records provide concrete details under CVE-2018-12532: Red Hat JBoss RichFaces 4.5.3–4.5.17 allow unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java cod...
CVE-2017-14793
Beckhoff TwinCAT: CVE-2018-7502 (linked via duplicate of CVE-2017-14793) affects kernel drivers in TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1. Root cause is lack of proper validation of user-supplied pointer values in kernel drivers, enabling a code-executing attack to obtain...
CVE-2014-10052
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile, Snapdragon Wear, and Small Cell SoC FSM9055, IPQ4019, MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 600, SD 615/16/SD 415, S...
ALPINE-CVE-2016-5875
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
ALPINE-CVE-2016-5320
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-5314. Reason: This candidate is a reservation duplicate of CVE-2016-5314. Notes: All CVE users should reference CVE-2016-5314 instead of this candidate. All references and descriptions in this candidate have been removed to...
UBUNTU-CVE-2018-7334
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umtsmac.c by rejecting a certain reserved value...
CVE-2018-1000066
This CVE-2018-1000066 entry is rejected/not used and does not represent an active vulnerability.
CVE-2017-1000441
CVE-2017-14931 describes a denial-of-service vulnerability in OpenExif 2.1.4: ExifImageFileRead.cpp::readDQT allows remote attackers to trigger a stack-based buffer over-read and crash a vulnerable OpenExif-based application via a crafted JPEG file. This CVE-2017-1000441 was a reservation duplica...
Code Execution Vulnerability in ForceControl
ForceControl is the configuration software developed by ForceControl Technology for the general monitoring and control configuration software market. As the basic platform software in industrial automation software, ForceControl can provide solutions for all kinds of industries. A code execution...
UBUNTU-CVE-2017-1000384
REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16355. Reason: This candidate is a reservation duplicate of CVE-2017-16355. Notes: All CVE users should reference CVE-2017-16355 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Restoring GPT Disk to Incompatible Legacy BIOS System
Challenge After selecting a restore point during the bare metal restore configuration, the following message pops up: OS disk in backup uses GPT disk. This may cause boot issues on BIOS systems. If this is ignored and the restore process completes, the following may happen when the restored machi...
CVE-2017-5716
Summary: ConnMan contains a stack-based buffer overflow in the DNS proxy (dnsproxy.c) that can be exploited by crafted DNS responses to cause a denial of service or remote code execution. This vulnerability has CVEs linked to CVE-2017-12865 and CVE-2017-5716, with public advisories noting remote ...
CVE-2017-1000179
CVE-2017-1000179 is rejected/not used; this CVE ID does not represent an active vulnerability entry.
gtk-vnc security, bug fix, and enhancement update
0.7.0-2 - Fix reserved data size rhbz 1416783 - Fix inverted args in tests rhbz 1416783 - Avoid sign extension problems rhbz 1416783 - Fix crash with opening via GSocketAddress rhbz 1416783 - Fix crash & error reporting during connection timeout rhbz 1441120 - Fix incompatibility with libvncserve...
puerres-narino.gov.co XSS vulnerability
Open Bug Bounty ID: OBB-269742 Description| Value ---|--- Affected Website:| puerres-narino.gov.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2012-2382
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1930. Reason: This candidate is a reservation duplicate of CVE-2011-1930. Notes: All CVE users should reference CVE-2011-1930 instead of this candidate. All references and descriptions in this candidate have been removed to...
CVE-2011-4365
CVE-2011-4365 is a reservation/duplicate of CVE-2011-4090. Connected sources describe CVE-2011-4090 as an XSS vulnerability in Serendipity before v1.6 (karma plugin) that may enable privilege escalation. Affected software: Serendipity CMS with the karma plugin prior to 1.6. Root cause: XSS leadin...