deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-3916
Published: 2018-08-28
Description: An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0581
CVE: CVE-2018-15896
Published: 2018-08-28
Description: PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gkaim.com/cve-2018-15896-vikas-chaudhary/; https://gkaim.com/cve-2018-15896-vikas-chaudhary/
CVE: CVE-2018-15897
Published: 2018-08-28
Description: PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://gkaim.com/cve-2018-15897-vikas-chaudhary/; https://gkaim.com/cve-2018-15897-vikas-chaudhary/
CVE: CVE-2018-15121
Published: 2018-08-29
Description: An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://auth0.com/docs/security/bulletins/cve-2018-15121; https://auth0.com/docs/security/bulletins/cve-2018-15121
CVE: CVE-2018-15880
Published: 2018-08-29
Description: An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105164; http://www.securitytracker.com/id/1041913; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-stored-xss-vulnerability-in-the-frontend-profile.html
CVE: CVE-2018-15881
Published: 2018-08-29
Description: An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/105161; http://www.securitytracker.com/id/1041913; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-acl-violation-in-custom-fields.html
CVE: CVE-2018-15882
Published: 2018-08-29
Description: An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.securityfocus.com/bid/105166; http://www.securitytracker.com/id/1041913; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-hardening-the-inputfilter-for-phar-stubs.html
CVE: CVE-2018-16062
Published: 2018-08-29
Description: dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html; https://access.redhat.com/errata/RHSA-2019:2197; https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html
CVE: CVE-2018-12799
Published: 2018-08-29
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]5 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]4 and earlier have an untrusted pointer dereference vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/105069; http://www.securitytracker.com/id/1041471; https://helpx.adobe.com/security/products/acrobat/apsb18-29.html
CVE: CVE-2018-12806
Published: 2018-08-29
Description: Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105067; http://www.securitytracker.com/id/1041470; https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html
CVE: CVE-2018-12807
Published: 2018-08-29
Description: Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105068; http://www.securitytracker.com/id/1041470; https://helpx.adobe.com/security/products/experience-manager/apsb18-26.html
CVE: CVE-2018-12808
Published: 2018-08-29
Description: Adobe Acrobat and Reader versions 2[PII_REDACTED]5 and earlier, 2[PII_REDACTED]6 and earlier, and 2[PII_REDACTED]4 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105069; http://www.securitytracker.com/id/1041471; https://helpx.adobe.com/security/products/acrobat/apsb18-29.html
CVE: CVE-2018-12810
Published: 2018-08-29
Description: Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105123; http://www.securitytracker.com/id/1041599; https://helpx.adobe.com/security/products/photoshop/apsb18-28.html
CVE: CVE-2018-12811
Published: 2018-08-29
Description: Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Successful exploitation could lead to remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/105123; http://www.securitytracker.com/id/1041599; https://helpx.adobe.com/security/products/photoshop/apsb18-28.html
CVE: CVE-2018-12824
Published: 2018-08-29
Description: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105066; http://www.securitytracker.com/id/1041448; https://access.redhat.com/errata/RHSA-2018:2435
CVE: CVE-2018-12825
Published: 2018-08-29
Description: Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to security mitigation bypass.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105070; http://www.securitytracker.com/id/1041448; https://access.redhat.com/errata/RHSA-2018:2435
CVE: CVE-2018-12826
Published: 2018-08-29
Description: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105066; http://www.securitytracker.com/id/1041448; https://access.redhat.com/errata/RHSA-2018:2435
CVE: CVE-2018-12827
Published: 2018-08-29
Description: Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105066; http://www.securitytracker.com/id/1041448; https://access.redhat.com/errata/RHSA-2018:2435
CVE: CVE-2018-12828
Published: 2018-08-29
Description: Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: http://www.securityfocus.com/bid/105071; http://www.securitytracker.com/id/1041448; https://access.redhat.com/errata/RHSA-2018:2435
CVE: CVE-2018-12829
Published: 2018-08-29
Description: Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-295
References: http://www.securityfocus.com/bid/105158; http://www.securitytracker.com/id/1041600; https://helpx.adobe.com/security/products/creative-cloud/apsb18-32.html
CVE: CVE-2018-1318
Published: 2018-08-29
Description: Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105176; https://github.com/apache/trafficserver/pull/3195; https://lists.apache.org/thread.html/9357cdfb6352f[PII_REDACTED]8b712e37196ad9e4bc0f17c4828a26fb2%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2018-5003
Published: 2018-08-29
Description: Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/105065; http://www.securitytracker.com/id/1041469; https://helpx.adobe.com/security/products/creative-cloud/apsb18-20.html
CVE: CVE-2018-8004
Published: 2018-08-29
Description: There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server (ATS). This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-444
References: http://www.securityfocus.com/bid/105192; https://github.com/apache/trafficserver/pull/3192; https://github.com/apache/trafficserver/pull/3201
CVE: CVE-2018-8005
Published: 2018-08-29
Description: When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400
References: http://www.securityfocus.com/bid/105187; https://github.com/apache/trafficserver/pull/3106; https://github.com/apache/trafficserver/pull/3124
CVE: CVE-2018-8022
Published: 2018-08-29
Description: A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade to 6.2.3 or later versions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/105183; https://github.com/apache/trafficserver/pull/2147; https://lists.apache.org/thread.html/ce404d2fe16cc59085ece5a6236ccd1549def471a2a9508198d966b1%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2018-8040
Published: 2018-08-29
Description: Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffic Server (ATS) versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.securityfocus.com/bid/105181; https://github.com/apache/trafficserver/pull/3926; https://lists.apache.org/thread.html/36b3df68fe7311965f6bc4630ca413d2aa99d8f1d53affda85ea70d7%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2018-15727
Published: 2018-08-29
Description: Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://www.securityfocus.com/bid/105184; https://access.redhat.com/errata/RHSA-2018:3829; https://access.redhat.com/errata/RHSA-2019:0019
CVE: CVE-2018-558213
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-15727. Reason: This candidate is a reservation duplicate of CVE-2018-15727. Notes: All CVE users should reference CVE-2018-15727 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-14805
Published: 2018-08-29
Description: ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/105169; https://ics-cert.us-cert.gov/advisories/ICSA-18-240-04; https://search.abb.com/library/Download.aspx?DocumentID=9AKK107046A5821&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2017-17762
Published: 2018-08-29
Description: XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary files via a crafted DTD in an XML request involving util/xmlrpc/Handler.ashx.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://gist.github.com/jonaslejon/5f[PII_REDACTED]0a1a1e676af0795bd9aa; https://kryptera.se/sarbarhet-i-episerver/; https://gist.github.com/jonaslejon/5f[PII_REDACTED]0a1a1e676af0795bd9aa
CVE: CVE-2018-12710
Published: 2018-08-29
Description: An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.
CVSS Score: 8.0 (HIGH)
CWE: CWE-319
References: http://seclists.org/fulldisclosure/2018/Aug/45; https://www.exploit-db.com/exploits/45306/; http://seclists.org/fulldisclosure/2018/Aug/45
CVE: CVE-2018-14768
Published: 2018-08-29
Description: Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code.
CVSS Score: 8.8 (HIGH)
References: http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf; https://www.vivotek.com/website/support/cybersecurity/; http://download.vivotek.com/downloadfile/support/cyber-security/vvtk-sa-2018-003-v1.pdf
CVE: CVE-2018-15562
Published: 2018-08-29
Description: CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/149109/CMS-ISWEB-3.5.3-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/149109/CMS-ISWEB-3.5.3-Cross-Site-Scripting.html
CVE: CVE-2018-15746
Published: 2018-08-29
Description: qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
CVSS Score: 5.5 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2018/08/28/6; https://access.redhat.com/errata/RHSA-2019:2425; https://lists.gnu.org/archive/html/qemu-devel/2018-08/msg04892.html
CVE: CVE-2018-15907
Published: 2018-08-29
Description: Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might overlap CVE-2018-15852 and CVE-2018-16310. NOTE: Technicolor denies that the described behavior is a vulnerability and states that Wi-Fi traffic is slowed or stopped only while the devices are exposed to a MAC flooding attack. This has been confirmed through testing against official up-to-date versions
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://bkd00r.wordpress.com/2018/08/27/cve-2018-15907-exploit-title-techniclor-formerly-rca-tc8305c-wireless-gateway-802-11b-g-n-gigaport-x-4-port-router-w-2-voice-lines-xfinity-comcast-buffer-overflow/; https://bkd00r.wordpress.com/2018/08/27/cve-2018-15907-exploit-title-techniclor-formerly-rca-tc8305c-wireless-gateway-802-11b-g-n-gigaport-x-4-port-router-w-2-voice-lines-xfinity-comcast-buffer-overflow/
CVE: CVE-2018-15912
Published: 2018-08-29
Description: An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can install or remove arbitrary packages and package repositories potentially containing hooks with arbitrary code, which will automatically be run as root, or remove packages vital to the system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8a; https://lists.manjaro.org/pipermail/manjaro-security/2018-August/000785.html; https://gitlab.manjaro.org/packages/core/manjaro-system/commit/8208b8a
CVE: CVE-2018-6597
Published: 2018-08-29
Description: The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).
CVSS Score: 6.8 (MEDIUM)
References: https://www.kryptowire.com/portal/android-firmware-defcon-2018/; https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE: CVE-2018-6598
Published: 2018-08-29
Description: An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices. Any app co-located on the device can send an intent to factory reset the device programmatically because of com.android.server.MasterClearReceiver. This does not require any user interaction and does not require any permission to perform. A factory reset will remove all user data from the device. This will result in the loss of any data that the user has not backed up or synced externally. This capability to perform a factory reset is not directly available to third-party apps (those that the user installs themselves), although this capability is present in an unprotected component of the Android OS. This vulnerability is not present in Google's Android Open Source Project (AOSP) code. Therefore, it was introduced by Orbic or another entity in the supply chain.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: https://www.kryptowire.com/portal/android-firmware-defcon-2018/; https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE: CVE-2018-6599
Published: 2018-08-29
Description: An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices, allowing attackers to obtain sensitive information (such as text-message content) by reading a copy of the Android log on the SD card. The system-wide Android logs are not directly available to third-party apps since they tend to contain sensitive data. Third-party apps can read from the log but only the log messages that the app itself has written. Certain apps can leak data to the Android log due to not sanitizing log messages, which is in an insecure programming practice. Pre-installed system apps and apps that are signed with the framework key can read from the system-wide Android log. We found a pre-installed app on the Orbic Wonder that when started via an Intent will write the Android log to the SD card, also known as external storage, via com.ckt.mmitest.MmiMainActivity. Any app that requests the READ_EXTERNAL_STORAGE permission can read from the SD card. Therefore, a local app on the device can quickly start a specific component in the pre-installed system app to have the Android log written to the SD card. Therefore, any app co-located on the device with the READ_EXTERNAL_STORAGE permission can obtain the data contained within the Android log and continually monitor it and mine the log for relevant data. In addition, the default messaging app (com.android.mms) writes the body of sent and received text messages to the Android log, as well as the recipient phone number for sent text messages and the sending phone number for received text messages. In addition, any call data contains phone numbers for sent and received calls.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://www.kryptowire.com/portal/android-firmware-defcon-2018/; https://www.kryptowire.com/portal/android-firmware-defcon-2018/
CVE: CVE-2018-12240
Published: 2018-08-29
Description: The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likelihood of encrypted data being recovered without adequate credentials.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-798
References: http://www.securityfocus.com/bid/105146; https://support.symantec.com/en_US/article.SYMSA1460.html; http://www.securityfocus.com/bid/105146
CVE: CVE-2018-7789
Published: 2018-08-29
Description: An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0). The vulnerability allows unauthorized users to remotely reboot Modicon M221 using crafted programing protocol frames.
CVSS Score: 7.5 (HIGH)
CWE: CWE-754
References: http://www.securityfocus.com/bid/105171; https://ics-cert.us-cert.gov/advisories/ICSA-18-240-02; https://www.schneider-electric.com/en/download/document/SEVD-2018-233-01/
CVE: CVE-2018-7795
Published: 2018-08-29
Description: A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105170; https://ics-cert.us-cert.gov/advisories/ICSA-18-240-03; https://www.schneider-electric.com/en/download/document/SEVD-2018-228-01/
CVE: CVE-2017-10651
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-10652
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-10653
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-10654
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none
CVE: CVE-2017-10655
Published: 2018-08-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2017. Notes: none