CVE-2002-1259

CVE-2002-1259 is a reservation duplicate of CVE-2002-1286; there are no separate details for 1259. The connected records describe CVE-2002-1286: The Microsoft Java implementation in Internet Explorer allows remote attackers to steal cookies and execute script in a different security context via a...

CVE-2023-33623

GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...

CVE-2024-2167

This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-34466

CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...

CVE-2024-24403

CVE-2024-30176 affects Logpoint prior to 7.4.0. An attacker can enumerate a valid usernames list by using publicly exposed URLs of shared widgets. Remediation: update to Logpoint 7.4.0 or later. Note: CVE-2024-24403 is a reservation duplicate of CVE-2024-30176; the 24403 entry has no independent ...

CVE-2023-5619

CVE-2023-5619 is rejected/not used per the initial description.

CVE-2023-5442

CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...

CVE-2023-35825

This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.