CVE-2023-37637

CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...

CVE-2023-6734

CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.

CVE-2021-20242

CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...

CVE-2023-4026

CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...

CVE-2021-34064

CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...

CVE-2024-2167

This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-39190

CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...

CVE-2023-22369

This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.

CVE-2023-43956

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-31813

The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...

CVE-2014-3605

CVE-2014-3605 is a rejected/not used CVE and does not represent an active vulnerability entry.

CVE-2024-2545

CVE-2024-2545 is a duplicate of CVE-2024-1730 and has been marked as Rejected/not to be used; refer to CVE-2024-1730 for the actual vulnerability context (Stored XSS in Prime Slider – Addons For Elementor WordPress plugin up to v3.14.0 due to insufficient input sanitization and output escaping).

CVE-2023-5773

CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...

CVE-2016-2144

CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.

CVE-2023-26823

CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.

CVE-2024-33331

CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...

CVE-2023-43764

CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...

CVE-2021-3648

CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.

CVE-2024-0228

CVE-2024-0228 is a duplicate of CVE-2024-0193 (per the CVE list). The connected records describe CVE-2024-0193 as a use-after-free vulnerability in the Linux kernel netfilter nft_tables component when the catchall element is garbage-collected during set removal, enabling a local privileged escala...

CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...