CVE-2024-27692

The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...

CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...

CVE-2021-32861

CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber

CVE-2023-2918

CVE-2023-2918 is rejected/not used per the Initial Description.

CVE-2023-26931

Removed by vendor...

CVE-2024-38515

CVE-2024-38515 is rejected (duplicate of CVE-2024-38374) and does not represent an active vulnerability entry.

CVE-2023-38815

CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....

CVE-2023-40270

CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...

CVE-2023-39195

CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...

CVE-2022-28748

CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.

CVE-2023-3995

CVE-2023-3995 is rejected/not used; duplicate of CVE-2023-4147.

CVE-2024-4579

CVE-2024-4579 is a reservation/duplicate of CVE-2024-4295. The connected data for CVE-2024-4295 shows an unauthenticated SQL injection in Email Subscribers by Icegram Express

CVE-2023-31508

This CVE (CVE-2023-31508) is a duplicate of CVE-2020-15178 for the PrestaShop contactform module. Affected: prestashop/contactform before version 4.3.0. Root cause: the message field was not properly escaped, enabling injection of JavaScript into a victim’s browser via the contact form. Impact: a...

CVE-2016-2144

CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.

CVE-2023-6115

CVE-2023-6115 entry is rejected/not used (duplicate CVE) per description.

CVE-2024-1992

CVE-2024-1992 is a duplicate of CVE-2024-2306. Connected record CVE-2024-2306 documents a Stored XSS in the Revslider WordPress plugin via SVG uploads, affecting all versions up to 6.6.20. Exploitation requires authenticated access (administrators by default, with broader access potentially via c...

CVE-2024-33331

CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...

CVE-2015-5155

CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-46849

CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.

CVE-2024-2041

CVE-2024-2041 is rejected/not used and does not represent an active vulnerability entry.