CVE-2018-16906

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none...

DEBIAN-CVE-2020-7069

In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with opensslencrypt function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data...

edinburgh-usedcateringequipment.co.uk Cross Site Scripting vulnerability OBB-1359273

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

RUSTSEC-2020-0032 StrcCtx deallocates a memory region that it doesn't own

StrcCtx deallocate a memory region that it doesn't own when StrcCtx is created without using StrcCtx::new. This can introduce memory safety issues such as double-free and use-after-free to client programs...

CVE-2020-0259: Undefined Security Weakness

In androidverityctr of dm-android-verity.c, there is a possible way to modify a dm-verity protected filesystem due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

ALPINE-CVE-2020-15705

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim...

werbemittel-regensburg.de Cross Site Scripting vulnerability OBB-1224671

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2019-5735

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2019. Notes: none...

CVE-2020-8455

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8453

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8451

The reserved CVE was never used...

CVE-2020-8460

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8459

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8458

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8457

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8456

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8452

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2020-8454

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

DaQuanZhouAuto.com PHP website program suffers from SQL injection vulnerability.

DaQuanZhouCar.com PHP whole site program is a used car publishing website developed by PHP+MySQL. DaQuanZhouAuto.com PHP whole site program has SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

comune.volpago-del-montello.tv.it Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1151003 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...