5779 matches found
CVE-2023-26931
CVE-2023-26931 is rejected and should not be used; reference CVE-2022-30524.
CVE-2023-34255
CVE-2023-34255 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-33623
GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...
CVE-2022-24580
CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.
CVE-2022-23967
CVE-2022-23967 has been identified as a duplicate of CVE-2019-15679. Connected sources confirm the underlying issue: TightVNC 1.3.10 contains a heap buffer overflow in InitialiseRFBConnection, enabling potential code execution via network connectivity (CVE-2019-15679). Additional related CVEs in ...
CVE-2021-34250
CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...
CVE-2021-20242
CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...
CVE-2014-3605
CVE-2014-3605 is a rejected/not used CVE and does not represent an active vulnerability entry.
CVE-2024-1864
CVE-2024-1864 is a duplicate of CVE-2023-2813 and is not a separate vulnerability entry. The connected NUCLEI template for CVE-2023-2813 describes a reflected XSS in WordPress themes (Aapna/Anand/Anfaust/Arendelle/… and more) where the search box reflects results, allowing an unauthenticated atta...
CVE-2024-2167
This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-1087
CVE-2024-1087 is rejected; this CVE entry is not used and does not represent an active vulnerability.
CVE-2024-0694
CVE-2024-0694 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-5755
CVE-2023-5755 is a duplicate of CVE-2023-46784 and adds no new technical details. The flaw affects the WordPress ICS Calendar plugin (ics-calendar) prior to version 10.12.0.3, caused by improper limitation of a pathname, enabling Path Traversal and SSRF. The connected CVE-2023-46784 entry confirm...
CVE-2021-42248
Removed by vendor...
CVE-2022-27458
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...
CVE-2023-5773
CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...
CVE-2023-31813
The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...
CVE-2023-6920
CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.