5569 matches found
CVE-2023-30078
CVE-2023-30078 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-5773
CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...
CVE-2023-4026
CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...
CVE-2021-42248
Removed by vendor...
CVE-2024-2875
CVE-2024-2875 is a rejected/duplicate entry; this CVE is not active and should be replaced by CVE-2024-4258.
CVE-2023-33623
GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...
CVE-2021-32861
CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber
CVE-2024-27084
CVE-2024-27084 is a duplicate of CVE-2024-1631. The underlying issue is insecure key generation in Ed25519KeyIdentity.generate used by a library (notably in DFINITY agent-js). Reported impact: compromised private keys could allow loss of funds or loss of control over canisters. Remediation noted ...
CVE-2024-1998
CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...
CVE-2023-39168
CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.
CVE-2023-4621
CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...
CVE-2022-44147
CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...
CVE-2023-30079
CVE-2023-30079 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-20145
CVE-2020-20145 is a rejected reservation duplicate and should reference CVE-2019-14834.
CVE-2023-22369
This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.
CVE-2023-3451
CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...
CVE-2023-31813
The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...
CVE-2024-5761
CVE-2024-5761 is a rejected candidate and not an active vulnerability entry.
CVE-2023-0884
CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...