5779 matches found
CVE-2023-3451
CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...
CVE-2023-43764
CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...
CVE-2023-2918
CVE-2023-2918 is rejected/not used per the Initial Description.
CVE-2024-1992
CVE-2024-1992 is a duplicate of CVE-2024-2306. Connected record CVE-2024-2306 documents a Stored XSS in the Revslider WordPress plugin via SVG uploads, affecting all versions up to 6.6.20. Exploitation requires authenticated access (administrators by default, with broader access potentially via c...
CVE-2023-5947
CVE-2023-5947 is a duplicate of CVE-2023-7247 and should reference CVE-2023-7247 instead. The connected records (Red Hat and NVD) describe CVE-2023-7247 as a vulnerability in the WordPress plugin Login as User or Customer (
CVE-2024-1373
Summary : CVE-2023-46209 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin G5Theme Grid Plus – Unlimited grid , affecting versions ≤ 1.3.2. The issue allows script injection via reflected input and is observed in the plugin stack described in multipl...
CVE-2023-5442
CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...
CVE-2023-5619
CVE-2023-5619 is rejected/not used per the initial description.
CVE-2023-39977
CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.
CVE-2023-39190
CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2023-31508
This CVE (CVE-2023-31508) is a duplicate of CVE-2020-15178 for the PrestaShop contactform module. Affected: prestashop/contactform before version 4.3.0. Root cause: the message field was not properly escaped, enabling injection of JavaScript into a victim’s browser via the contact form. Impact: a...
CVE-2023-35825
This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.
CVE-2022-28748
CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.
CVE-2016-2144
CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-46849
CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.
CVE-2023-6734
CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.