6151 matches found
CVE-2021-3648
CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.
CVE-2021-20242
CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...
CVE-2021-34250
CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...
CVE-2022-39390
CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...
CVE-2021-32861
CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber
CVE-2021-34064
CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...
CVE-2022-24580
CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.
CVE-2023-26823
CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.
CVE-2023-3451
CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...
CVE-2023-39190
CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...
CVE-2023-4026
CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...
CVE-2022-42986
CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.
CVE-2023-31813
The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...
CVE-2021-46849
CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.
CVE-2023-6092
CVE-2023-6092 entry is rejected/not used according to the description.
CVE-2024-27692
The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...
CVE-2023-3123
CVE-2023-3123 is rejected/not used per the Initial Description.
CVE-2023-22369
This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.
CVE-2024-1998
CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...