CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...

CVE-2023-5999

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-2918

CVE-2023-2918 is rejected/not used per the Initial Description.

CVE-2024-34466

CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...

CVE-2023-31813

The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...

CVE-2024-1998

CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...

CVE-2020-20145

CVE-2020-20145 is a rejected reservation duplicate and should reference CVE-2019-14834.

CVE-2024-1865

The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...

CVE-2024-5609

CVE-2024-5609 is a rejected candidate; reference CVE-2023-6966 instead.

CVE-2023-30079

CVE-2023-30079 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-22369

This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.

CVE-2023-4859

CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.

CVE-2023-6920

CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.

CVE-2023-26823

CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.

CVE-2023-3451

CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...

CVE-2023-4621

CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...

CVE-2024-2545

CVE-2024-2545 is a duplicate of CVE-2024-1730 and has been marked as Rejected/not to be used; refer to CVE-2024-1730 for the actual vulnerability context (Stored XSS in Prime Slider – Addons For Elementor WordPress plugin up to v3.14.0 due to insufficient input sanitization and output escaping).

CVE-2022-42986

CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.

CVE-2024-27692

The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...

CVE-2023-0884

CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...