5569 matches found
CVE-2023-39195
CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2024-1469
CVE-2024-1469 is a duplicate entry; the connected document confirms this and points to CVE-2024-0845 as the valid reference. CVE-2024-0845 concerns PDF Viewer for Elementor (WordPress) up to version 2.9.3, with an authenticated Stored Cross-Site Scripting vulnerability via the render function. Th...
CVE-2023-39977
CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.
CVE-2023-40270
CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...
CVE-2023-37637
CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...
CVE-2024-1373
Summary : CVE-2023-46209 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin G5Theme Grid Plus – Unlimited grid , affecting versions ≤ 1.3.2. The issue allows script injection via reflected input and is observed in the plugin stack described in multipl...
CVE-2024-2041
CVE-2024-2041 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-33331
CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...
CVE-2024-1992
CVE-2024-1992 is a duplicate of CVE-2024-2306. Connected record CVE-2024-2306 documents a Stored XSS in the Revslider WordPress plugin via SVG uploads, affecting all versions up to 6.6.20. Exploitation requires authenticated access (administrators by default, with broader access potentially via c...
CVE-2024-0228
CVE-2024-0228 is a duplicate of CVE-2024-0193 (per the CVE list). The connected records describe CVE-2024-0193 as a use-after-free vulnerability in the Linux kernel netfilter nft_tables component when the catchall element is garbage-collected during set removal, enabling a local privileged escala...
CVE-2014-6033
CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...
CVE-2021-46849
CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.
CVE-2023-5619
CVE-2023-5619 is rejected/not used per the initial description.
CVE-2023-39190
CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...
CVE-2024-3556
CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.
CVE-2023-6734
CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.
CVE-2023-5442
CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...