6171 matches found
CVE-2022-44147
CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...
CVE-2023-33623
GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...
CVE-2024-1087
CVE-2024-1087 is rejected; this CVE entry is not used and does not represent an active vulnerability.
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-6920
CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.
CVE-2023-30183
CVE-2023-30183 is a reservation duplicate of CVE-2023-30349; CVE-2023-30349 affects JFinal CMS v5.1.0 and describes a remote code execution via the ActionEnter function. Connected sources confirm RCE details; no patch/version fixes are provided in the supplied documents. Exploitation status and i...
CVE-2024-27084
CVE-2024-27084 is a duplicate of CVE-2024-1631. The underlying issue is insecure key generation in Ed25519KeyIdentity.generate used by a library (notably in DFINITY agent-js). Reported impact: compromised private keys could allow loss of funds or loss of control over canisters. Remediation noted ...
CVE-2024-0694
CVE-2024-0694 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-46267
CVE-2023-46267 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-1865
The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...
CVE-2024-5761
CVE-2024-5761 is a rejected candidate and not an active vulnerability entry.
CVE-2024-2041
CVE-2024-2041 is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-32861
CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber
CVE-2023-45665
CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-2875
CVE-2024-2875 is a rejected/duplicate entry; this CVE is not active and should be replaced by CVE-2024-4258.
CVE-2023-39195
CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...
CVE-2021-34250
CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...
CVE-2024-27692
The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...
CVE-2024-1998
CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...