CVE-2022-39390

CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...

CVE-2021-32861

CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber

CVE-2021-34064

CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...

CVE-2022-24580

CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.

CVE-2023-26823

CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.

CVE-2023-3451

CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...

CVE-2023-39190

CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...

CVE-2023-4026

CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...

CVE-2022-42986

CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.

CVE-2023-26931

Removed by vendor...

CVE-2021-42248

Removed by vendor...

CVE-2021-46849

CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.

CVE-2023-6092

CVE-2023-6092 entry is rejected/not used according to the description.

CVE-2024-27692

The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...

CVE-2023-3123

CVE-2023-3123 is rejected/not used per the Initial Description.

CVE-2023-22369

This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.

CVE-2024-33331

CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...

CVE-2014-6033

CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...

CVE-2023-39168

CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.

CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...