CVE-2023-33623

GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...

CVE-2023-2918

CVE-2023-2918 is rejected/not used per the Initial Description.

CVE-2023-35825

This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.

CVE-2023-39977

CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.

CVE-2023-38815

CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....

CVE-2022-3403

CVE-2022-3403 is a duplicate of CVE-2023-28931. Connected records show that CVE-2023-28931 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Never5 Post Connector WordPress plugin versions <= 1.0.9. The available sources confirm the issue type (stored XSS) and affected softwar...

CVE-2023-30078

CVE-2023-30078 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-30079

CVE-2023-30079 is rejected/not used and does not represent an active vulnerability entry.

CVE-2020-20145

CVE-2020-20145 is a rejected reservation duplicate and should reference CVE-2019-14834.

CVE-2023-40270

CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...

CVE-2023-3995

CVE-2023-3995 is rejected/not used; duplicate of CVE-2023-4147.

CVE-2023-4563

CVE-2023-4563 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2023-4621

CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...

CVE-2023-43764

CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...

CVE-2023-39195

CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...

CVE-2023-6920

CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.

CVE-2023-5442

CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...

CVE-2023-5619

CVE-2023-5619 is rejected/not used per the initial description.

CVE-2024-0228

CVE-2024-0228 is a duplicate of CVE-2024-0193 (per the CVE list). The connected records describe CVE-2024-0193 as a use-after-free vulnerability in the Linux kernel netfilter nft_tables component when the catchall element is garbage-collected during set removal, enabling a local privileged escala...

CVE-2023-5773

CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...