CVE-2022-2076

CVE-2022-2076 is rejected/not used; this candidate does not represent an active vulnerability entry.

CVE-2021-41452

CVE-2021-41452 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-41447

CVE-2021-41447 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-41446

CVE-2021-41446 entry is rejected/not used; it does not represent an active vulnerability.

CVE-2022-31279

CVE-2022-31279 has been withdrawn as not a security issue (cited in initial description). Connected records nonetheless describe a Laravel-related RCE risk: Laravel 9.1.8 processing attacker-controlled data allows Remote Code Execution via an unserialized pop chain in Illuminate\Broadcasting\Pend...

CVE-2017-17461

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2022-27092

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2021-41927

CVE-2021-41927 entry rejected; this CVE ID is not used and does not represent an active vulnerability.

CVE-2022-30779

CVE-2022-30779 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2022-30778

Connected sources describe a Laravel/PHP deserialization issue impacting the PendingBroadcast flow via IlluminateBroadcastingPendingBroadcast.php and related dispatch logic in IlluminateBusQueueingDispatcher.php, enabling potential remote code execution through an insecure __destruct/deserializat...

CVE-2022-29268

CVE-2022-29268 entry is withdrawn, but connected documentation describes a related vulnerability in Bitrix: unrestricted upload of dangerous file types allowing remote code execution via crafted PHP, in Bitrix virtual server environments (VMBitrix) and affected through the Upload From Local Disk ...

CVE-2021-43149

CVE-2021-43149 entry is rejected/not used and does not represent an active vulnerability.

CVE-2022-27306

This CVE entry is rejected/not used; the candidate was withdrawn and does not represent an active vulnerability.

CVE-2021-46443

CVE-2021-46443 corresponds to Caida Spoofer 1.4.6, where a local privilege escalation exists due to an unquoted service path in the spoofer-scheduler service running as SYSTEM. Proof shows an attacker can place a malicious executable in the service path to gain elevated privileges; remediation de...

CVE-2021-46439

CVE-2021-46439 is rejected; this candidate is not an active vulnerability entry.

CVE-2022-26200

CVE-2022-26200 is rejected/not used per the Initial Description; the entry does not represent an active vulnerability.

CVE-2022-26502

CVE-2022-26502 is rejected; not used; this entry does not represent an active vulnerability.

CVE-2022-22623

CVE-2022-22623 entry is rejected; this candidate was withdrawn.

CVE-2021-44907

CVE-2021-44907 affects IBM Engineering Requirements Quality Assistant On-Premises. The vulnerability allows a remote attacker to cause a denial of service due to insufficient sanitization of a property in gs.parse. The IBM bulletin provides the vulnerability details but does not specify a remedia...