6171 matches found
CVE-2014-6033
CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...
CVE-2024-2437
CVE-2024-2437 is a reservation duplicate of CVE-2023-41728; the connected records show this CVE should reference CVE-2023-41728 instead. CVE-2023-41728 describes a Cross-site Scripting (Stored XSS) vulnerability in the Rescue Shortcodes WordPress plugin (Rescue Shortcodes) affecting versions up t...
CVE-2024-34466
CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...
CVE-2023-4859
CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.
CVE-2024-24403
CVE-2024-30176 affects Logpoint prior to 7.4.0. An attacker can enumerate a valid usernames list by using publicly exposed URLs of shared widgets. Remediation: update to Logpoint 7.4.0 or later. Note: CVE-2024-24403 is a reservation duplicate of CVE-2024-30176; the 24403 entry has no independent ...
CVE-2023-0884
CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...
CVE-2022-3403
CVE-2022-3403 is a duplicate of CVE-2023-28931. Connected records show that CVE-2023-28931 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Never5 Post Connector WordPress plugin versions <= 1.0.9. The available sources confirm the issue type (stored XSS) and affected softwar...
CVE-2022-28748
CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.
CVE-2024-1864
CVE-2024-1864 is a duplicate of CVE-2023-2813 and is not a separate vulnerability entry. The connected NUCLEI template for CVE-2023-2813 describes a reflected XSS in WordPress themes (Aapna/Anand/Anfaust/Arendelle/… and more) where the search box reflects results, allowing an unauthenticated atta...
CVE-2023-35825
This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.
CVE-2024-3556
CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.
CVE-2023-39168
CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.
CVE-2023-5999
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2022-42986
CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.
CVE-2023-31508
This CVE (CVE-2023-31508) is a duplicate of CVE-2020-15178 for the PrestaShop contactform module. Affected: prestashop/contactform before version 4.3.0. Root cause: the message field was not properly escaped, enabling injection of JavaScript into a victim’s browser via the contact form. Impact: a...
CVE-2023-34255
CVE-2023-34255 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-4631
CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.
CVE-2022-27458
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...