5779 matches found
CVE-2024-1469
CVE-2024-1469 is a duplicate entry; the connected document confirms this and points to CVE-2024-0845 as the valid reference. CVE-2024-0845 concerns PDF Viewer for Elementor (WordPress) up to version 2.9.3, with an authenticated Stored Cross-Site Scripting vulnerability via the render function. Th...
CVE-2024-4998
CVE-2024-4998 is a reservation/duplicate of CVE-2024-4566; the latter concerns ShopLentor for WordPress with unauthorized modification of data due to a missing capability check on ajax_dismiss in all versions up to 2.8.8. The entry for CVE-2024-4566 is marked as patched. This CVE-4998 entry shoul...
CVE-2024-2437
CVE-2024-2437 is a reservation duplicate of CVE-2023-41728; the connected records show this CVE should reference CVE-2023-41728 instead. CVE-2023-41728 describes a Cross-site Scripting (Stored XSS) vulnerability in the Rescue Shortcodes WordPress plugin (Rescue Shortcodes) affecting versions up t...
CVE-2023-43956
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-3995
CVE-2023-3995 is rejected/not used; duplicate of CVE-2023-4147.
CVE-2024-0228
CVE-2024-0228 is a duplicate of CVE-2024-0193 (per the CVE list). The connected records describe CVE-2024-0193 as a use-after-free vulnerability in the Linux kernel netfilter nft_tables component when the catchall element is garbage-collected during set removal, enabling a local privileged escala...
CVE-2023-45665
CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-37637
CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...
CVE-2023-39195
CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...
CVE-2023-40270
CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...
CVE-2023-6115
CVE-2023-6115 entry is rejected/not used (duplicate CVE) per description.
CVE-2016-2144
CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2022-28748
CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.
CVE-2022-39390
CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...
CVE-2021-46849
CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.
CVE-2014-6033
CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...
