5420 matches found
CVE-2023-4563
CVE-2023-4563 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2024-1788
CVE-2024-1788 is a duplicate of CVE-2023-2813. The connected NUCLEI template specifies a reflected cross-site scripting (XSS) issue in Wordpress themes caused by the search box reflecting results, enabling an unauthenticated attacker to exploit users who click a crafted link. Affected products in...
CVE-2021-42248
Removed by vendor...
CVE-2023-6079
CVE-2023-6079 is a duplicate of CVE-2023-40206. Affected product: hwk-fr WordPress plugin “WP 404 Auto Redirect to Similar Post” (versions
CVE-2023-5773
CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...
CVE-2024-2875
CVE-2024-2875 is a rejected/duplicate entry; this CVE is not active and should be replaced by CVE-2024-4258.
CVE-2022-23967
CVE-2022-23967 has been identified as a duplicate of CVE-2019-15679. Connected sources confirm the underlying issue: TightVNC 1.3.10 contains a heap buffer overflow in InitialiseRFBConnection, enabling potential code execution via network connectivity (CVE-2019-15679). Additional related CVEs in ...
CVE-2023-26931
CVE-2023-26931 is rejected and should not be used; reference CVE-2022-30524.
CVE-2024-2167
This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-3123
CVE-2023-3123 is rejected/not used per the Initial Description.
CVE-2023-34255
CVE-2023-34255 is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-34250
CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...
CVE-2023-4026
CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...
CVE-2023-33623
GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...
CVE-2021-34064
CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...
CVE-2022-27458
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...
CVE-2023-6092
CVE-2023-6092 entry is rejected/not used according to the description.
CVE-2024-27084
CVE-2024-27084 is a duplicate of CVE-2024-1631. The underlying issue is insecure key generation in Ed25519KeyIdentity.generate used by a library (notably in DFINITY agent-js). Reported impact: compromised private keys could allow loss of funds or loss of control over canisters. Remediation noted ...
CVE-2024-5761
CVE-2024-5761 is a rejected candidate and not an active vulnerability entry.
CVE-2023-43764
CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...