CVE-2023-30594

Connected documents describe CVE-2023-30594 as a Grav CMS SSTI bypass vulnerability in the Grav 1.x denylist. Affected: Grav

CVE-2023-30595

CVE-2023-30595 (Grav CMS) involves a server-side template injection in GravExtension.filterFilter() for Grav

CVE-2023-33622

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31475. Reason: This record is a reservation duplicate of CVE-2023-31475. Notes: All CVE users should reference CVE-2023-31475 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-33623

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-31478. Reason: This record is a reservation duplicate of CVE-2023-31478. Notes: All CVE users should reference CVE-2023-31478 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2022-32719

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-32726

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2022-32730

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...

CVE-2023-31554

CVE-2023-31554 is rejected/not used; refer to CVE-2023-2663.

SUSE CVE-2023-2483

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-33203. Reason: This candidate is a reservation duplicate of CVE-2023-33203. Notes: All CVE users should reference CVE-2023-33203 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2023-31554

REJECT DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-2663. Reason: This record is a reservation duplicate of CVE-2023-2663. Notes: All CVE users should reference CVE-2023-2663 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2023-26812

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-26813. Reason: This record is a reservation duplicate of CVE-2023-26813. Notes: All CVE users should reference CVE-2023-26813 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage...

CVE-2017-9088

Affected software: Flask and Werkzeug. Root cause: Directory traversal due to an inadequate filter in the Windows-specific path handling inside safe_join. Impact: Potential disclosure of arbitrary files from a server. Evidence: Veracode summary describes directory traversal vulnerability in Flask...

CVE-2014-1866

The connected VERACODE entry documents a vulnerability in fat_free_crm: Information leakage via error pages. The root cause is that consider_all_requests_local is set to true by default in production, causing 404 and 500 error pages to expose server setup information. The document does not provid...

CVE-2015-3507

The connected VERACODE entry documents a memory-leak DoS in OpenSSL caused by a zero-length DTLS fragment. It confirms OpenSSL is vulnerable to DoS via memory exhaustion, but the provided materials do not specify affected versions, exact root-cause code paths, or remediation steps. No exploit det...

CVE-2016-9971

The connected OSV/Veracode references indicate a CSRF vulnerability in Jupyter Notebook related to CSRF token checks and authorization header handling. Affected package is jupyter-notebook (notably 6.2.0-1.4 on openSUSE Tumbleweed per the OSV entry), with the Veracode entry noting possible creati...

CVE-2017-15689

Technical details for CVE-2017-15689 are not provided in the supplied documents. No information on affected products, root cause, or remediation is available here; monitor for updates.

CVE-2018-9863

The CVE-2018-9863 entry concerns the express-useragent Node.js/ExpressJS middleware. The connected documents reveal a concrete vulnerability: lack of sanitization/escaping of the HTTP User-Agent header , which an attacker can exploit to trigger Cross-site Scripting (XSS) . Impact described across...

CVE-2018-14178

The connected Veracode entry reports a practical vulnerability in the snapd project (github.com/snapcore/snapd) describing an access restriction bypass. Specifically, when the snap logs command is invoked via a call to journalctl, match arguments are not applied, allowing attackers to bypass syst...

CVE-2018-18902

Grafana (singlestat panel) is vulnerable to cross-site scripting (XSS) because the prefix and postfix fields are not properly sanitized, allowing an attacker to inject and execute arbitrary JavaScript in a victim’s browser. The connected Veracode entry confirms the XSS issue but provides no explo...

CVE-2018-7646

The connected Veracode entry identifies a denial of service in svgexport caused by a missing timeout when loading an external image. Impact is DoS; no exploit details are provided in the supplied documents. No CVE-specific remediation is stated here; monitor for updates.