CVE-2021-3648

CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.

CVE-2023-39168

CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.

CVE-2021-32861

CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber

CVE-2023-26931

Removed by vendor...

CVE-2015-5155

CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-6033

CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...

CVE-2023-39195

CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...

CVE-2024-24403

CVE-2024-30176 affects Logpoint prior to 7.4.0. An attacker can enumerate a valid usernames list by using publicly exposed URLs of shared widgets. Remediation: update to Logpoint 7.4.0 or later. Note: CVE-2024-24403 is a reservation duplicate of CVE-2024-30176; the 24403 entry has no independent ...

CVE-2023-39977

CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.

CVE-2023-5442

CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...

CVE-2023-31508

This CVE (CVE-2023-31508) is a duplicate of CVE-2020-15178 for the PrestaShop contactform module. Affected: prestashop/contactform before version 4.3.0. Root cause: the message field was not properly escaped, enabling injection of JavaScript into a victim’s browser via the contact form. Impact: a...

CVE-2024-1373

Summary : CVE-2023-46209 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin G5Theme Grid Plus – Unlimited grid , affecting versions ≤ 1.3.2. The issue allows script injection via reflected input and is observed in the plugin stack described in multipl...

CVE-2024-38515

CVE-2024-38515 is rejected (duplicate of CVE-2024-38374) and does not represent an active vulnerability entry.

CVE-2024-2437

CVE-2024-2437 is a reservation duplicate of CVE-2023-41728; the connected records show this CVE should reference CVE-2023-41728 instead. CVE-2023-41728 describes a Cross-site Scripting (Stored XSS) vulnerability in the Rescue Shortcodes WordPress plugin (Rescue Shortcodes) affecting versions up t...

CVE-2023-35825

This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.

CVE-2016-2144

CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.

CVE-2023-45665

CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-46849

CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.

CVE-2022-28748

CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.

CVE-2024-4998

CVE-2024-4998 is a reservation/duplicate of CVE-2024-4566; the latter concerns ShopLentor for WordPress with unauthorized modification of data due to a missing capability check on ajax_dismiss in all versions up to 2.8.8. The entry for CVE-2024-4566 is marked as patched. This CVE-4998 entry shoul...