deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-11540
Published: 2017-07-23
Description: When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99929; https://github.com/ImageMagick/ImageMagick/issues/581; http://www.securityfocus.com/bid/99929
CVE: CVE-2017-11541
Published: 2017-07-23
Description: tcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securityfocus.com/bid/99941; http://www.securitytracker.com/id/1039307
CVE: CVE-2017-11542
Published: 2017-07-23
Description: tcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3971; http://www.securityfocus.com/bid/99940; http://www.securitytracker.com/id/1039307
CVE: CVE-2017-11543
Published: 2017-07-23
Description: tcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3971; http://www.securityfocus.com/bid/99939; http://www.securitytracker.com/id/1039307
CVE: CVE-2017-11544
Published: 2017-07-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-11545
Published: 2017-07-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11543. Reason: This candidate is a duplicate of CVE-2017-11543. Notes: All CVE users should reference CVE-2017-11543 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-11553
Published: 2017-07-23
Description: There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1471772; https://bugzilla.redhat.com/show_bug.cgi?id=1471772
CVE: CVE-2017-11554
Published: 2017-07-23
Description: There is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc) in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://bugzilla.redhat.com/show_bug.cgi?id=1471780; https://github.com/sass/libsass/issues/2445; https://bugzilla.redhat.com/show_bug.cgi?id=1471780
CVE: CVE-2017-11555
Published: 2017-07-23
Description: There is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://bugzilla.redhat.com/show_bug.cgi?id=1471782; https://bugzilla.redhat.com/show_bug.cgi?id=1471782
CVE: CVE-2017-11556
Published: 2017-07-23
Description: There is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may lead to remote denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://bugzilla.redhat.com/show_bug.cgi?id=1471786; https://bugzilla.redhat.com/show_bug.cgi?id=1471786
CVE: CVE-2017-11565
Published: 2017-07-23
Description: debian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly (with a wrong assumption that the specific pathname would remain the same forever), which allows attackers to bypass intended AppArmor restrictions by leveraging the silent loss of this protection mechanism. NOTE: this does not affect systems, such as default Debian stretch installations, on which Tor startup relies on a systemd unit file (instead of this tor.init script).
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/99933; https://bugs.debian.org/869153; http://www.securityfocus.com/bid/99933
CVE: CVE-2017-11568
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines (psread.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3089; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11569
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3093; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11570
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/fontforge/fontforge/issues/3097; https://github.com/fontforge/fontforge/issues/3097
CVE: CVE-2017-11571
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3087; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11572
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3092; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11573
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/fontforge/fontforge/issues/3098; https://github.com/fontforge/fontforge/issues/3098
CVE: CVE-2017-11574
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3090; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11575
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or code execution via a crafted otf file, related to a call from the readttfcopyrights function in parsettf.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3096; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11576
Published: 2017-07-23
Description: FontForge 20161012 does not ensure a positive size in a weight vector memcpy call in readcfftopdict (parsettf.c) resulting in DoS via a crafted otf file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3091; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11577
Published: 2017-07-23
Description: FontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or code execution via a crafted otf file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3958; https://github.com/fontforge/fontforge/issues/3088; http://www.debian.org/security/2017/dsa-3958
CVE: CVE-2017-11581
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the username field that does not begin with a '<' character.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#Reflected-XSS; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#Reflected-XSS
CVE: CVE-2017-11582
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-after-limit-via-system-num-parameter; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-after-limit-via-system-num-parameter
CVE: CVE-2017-11583
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-in-action-related-catid-parameter; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-in-action-related-catid-parameter
CVE: CVE-2017-11584
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request to libraries/Template.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-via-system-field-parameter; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#SQL-injection-via-system-field-parameter
CVE: CVE-2017-11585
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#remote-php-code-execution; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#remote-php-code-execution
CVE: CVE-2017-11586
Published: 2017-07-24
Description: dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse; http://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse
CVE: CVE-2017-11587
Published: 2017-07-24
Description: On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is directory traversal in the filename parameter to the /download.conf URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2017/Jul/26; http://www.securityfocus.com/bid/100484; http://seclists.org/fulldisclosure/2017/Jul/26
CVE: CVE-2017-11588
Published: 2017-07-24
Description: On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is remote command execution via shell metacharacters in the pingAddr parameter to the waitPingqry.cgi URI. The command output is visible at /PingMsg.cmd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2017/Jul/26; http://www.securityfocus.com/bid/99963; http://seclists.org/fulldisclosure/2017/Jul/26
CVE: CVE-2017-11589
Published: 2017-07-24
Description: On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway DDR2201v1-NA-AnnexA-FCC-V00.00.03.28.3 devices, there is no access control for info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd, statsatm.cmd, scsrvcntr.cmd, scacccntr.cmd, logview.cmd, voicesipview.cmd, usbview.cmd, wlmacflt.cmd, wlwds.cmd, wlstationlist.cmd, HPNAShow.cmd, HPNAView.cmd, qoscls.cmd, qosqueue.cmd, portmap.cmd, scmacflt.cmd, scinflt.cmd, scoutflt.cmd, certlocal.cmd, or certca.cmd.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2017/Jul/26; http://seclists.org/fulldisclosure/2017/Jul/26
CVE: CVE-2017-11590
Published: 2017-07-24
Description: There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote denial of service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://bugzilla.redhat.com/show_bug.cgi?id=1473167; https://bugzilla.redhat.com/show_bug.cgi?id=1473167
CVE: CVE-2017-11591
Published: 2017-07-24
Description: There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.
CVSS Score: 7.5 (HIGH)
References: https://bugzilla.redhat.com/show_bug.cgi?id=1473888; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html; https://usn.ubuntu.com/3852-1/
CVE: CVE-2017-11592
Published: 2017-07-24
Description: There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=1473889; https://bugzilla.redhat.com/show_bug.cgi?id=1473889
CVE: CVE-2017-11593
Published: 2017-07-24
Description: Cross-site scripting (XSS) vulnerability in the Markdown Preview Plus extension before 0.5.7 for Chrome allows remote attackers to inject arbitrary web script or HTML into some web applications via the upload and display of crafted text, markdown, or rst files that are designed to be viewed in the browser as plain text, but that will be converted to HTML without proper sanitization.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/volca/markdown-preview/commit/1181f044a5457d5e1ac35804ecd84e05977f1920; https://github.com/volca/markdown-preview/issues/60; https://github.com/volca/markdown-preview/commit/1181f044a5457d5e1ac35804ecd84e05977f1920
CVE: CVE-2017-11594
Published: 2017-07-24
Description: Cross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows remote attackers to inject arbitrary web script or HTML via non-sanitized Markdown content in a new thread or a thread comment.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/loomio/loomio/commit/63973f71e337ead8ca7b7ae2a043b837032dc3fe; https://github.com/loomio/loomio/issues/4220; https://github.com/loomio/loomio/releases/tag/1.8.0
CVE: CVE-2017-11600
Published: 2017-07-24
Description: net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via an XFRM_MSG_MIGRATE xfrm Netlink message.
CVSS Score: 7.0 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html; http://seclists.org/bugtraq/2017/Jul/30; http://www.debian.org/security/2017/dsa-3981
CVE: CVE-2017-11605
Published: 2017-07-24
Description: There is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted input will lead to a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.securityfocus.com/bid/99930; https://bugzilla.redhat.com/show_bug.cgi?id=1474019; http://www.securityfocus.com/bid/99930
CVE: CVE-2017-11422
Published: 2017-07-24
Description: Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create new role, etc.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732
References: https://gist.github.com/rambo691/3714c8c09cf894d574d37c294711c49e; https://gist.github.com/rambo691/3714c8c09cf894d574d37c294711c49e
CVE: CVE-2017-11608
Published: 2017-07-24
Description: There is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp in LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://bugzilla.redhat.com/show_bug.cgi?id=1474276; https://bugzilla.redhat.com/show_bug.cgi?id=1474276
CVE: CVE-2017-10711
Published: 2017-07-24
Description: In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/; https://www.youtube.com/watch?v=jOUKEYW0RQw; https://www.seekurity.com/blog/general/reflected-xss-vulnerability-in-simplerisk/
CVE: CVE-2017-11324
Published: 2017-07-24
Description: An issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a SELECT query in class.SystemAction.php is vulnerable to SQL Injection. The vulnerability can be triggered via a POST request to /actionphp/action.input.php with the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/; https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE: CVE-2017-11325
Published: 2017-07-24
Description: An issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on actionphp/download.File.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/; https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE: CVE-2017-11326
Published: 2017-07-24
Description: An issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions on arbitrary file upload via a filename.+php manipulation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/; https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE: CVE-2017-11327
Published: 2017-07-24
Description: An issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using direct references. A low-privileged user can load PHP resources such as admin/content.php and admin/content.php?method=ftp_upload.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/; https://backbox.org/membership/sharing-board/tilde-cms-v1-01-multiple-vulnerabilities/
CVE: CVE-2015-7703
Published: 2017-07-24
Description: The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration password to write to arbitrary files via the :config command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2016-0780.html; http://rhn.redhat.com/errata/RHSA-2016-2583.html; http://support.ntp.org/bin/view/Main/NtpBug2902
CVE: CVE-2010-1154
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2010.  Notes: none
CVE: CVE-2010-1430
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2010.  Notes: none
CVE: CVE-2010-1631
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2010.  Notes: none
CVE: CVE-2010-2069
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2010-3309
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2010.  Notes: none
CVE: CVE-2010-4244
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-4234.  Reason: This candidate is a duplicate of CVE-2010-4234.  A typo caused the wrong ID to be used.  Notes: All CVE users should reference CVE-2010-4234 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-3608
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0815.  Reason: This candidate is a reservation duplicate of CVE-2012-0815.  Notes: All CVE users should reference CVE-2012-0815 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4933
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0819.  Reason: This candidate is a reservation duplicate of CVE-2012-0819.  Notes: All CVE users should reference CVE-2012-0819 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4934
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0820.  Reason: This candidate is a reservation duplicate of CVE-2012-0820.  Notes: All CVE users should reference CVE-2012-0820 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4935
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0821.  Reason: This candidate is a reservation duplicate of CVE-2012-0821.  Notes: All CVE users should reference CVE-2012-0821 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4936
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2012-0822.  Reason: This candidate is a reservation duplicate of CVE-2012-0822.  Notes: All CVE users should reference CVE-2012-0822 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2011-4965
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2011.  Notes: none
CVE: CVE-2017-2605
Published: 2017-07-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2[PII_REDACTED]. Reason: This candidate is a duplicate of CVE-2[PII_REDACTED].  A vendor reference identifier was mistakenly treated as a CVE ID. Notes: All CVE users should reference CVE-2[PII_REDACTED] instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage