6273 matches found
CVE-2020-20145
CVE-2020-20145 is a rejected reservation duplicate and should reference CVE-2019-14834.
CVE-2023-40270
CVE-2023-38831 affects WinRAR (pre-6.23). It allows code execution when a user views a ZIP archive containing a benign file and a folder with the same name, due to processing of the folder contents during access. Exploitation observed in the wild in 2023; patches released (WinRAR 6.23) to fix the...
CVE-2024-38515
CVE-2024-38515 is rejected (duplicate of CVE-2024-38374) and does not represent an active vulnerability entry.
CVE-2024-33331
CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...
CVE-2024-24403
CVE-2024-30176 affects Logpoint prior to 7.4.0. An attacker can enumerate a valid usernames list by using publicly exposed URLs of shared widgets. Remediation: update to Logpoint 7.4.0 or later. Note: CVE-2024-24403 is a reservation duplicate of CVE-2024-30176; the 24403 entry has no independent ...
CVE-2024-2041
CVE-2024-2041 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-34466
CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...
CVE-2024-4579
CVE-2024-4579 is a reservation/duplicate of CVE-2024-4295. The connected data for CVE-2024-4295 shows an unauthenticated SQL injection in Email Subscribers by Icegram Express
CVE-2024-4631
CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.
CVE-2024-5761
CVE-2024-5761 is a rejected candidate and not an active vulnerability entry.
CVE-2024-4998
CVE-2024-4998 is a reservation/duplicate of CVE-2024-4566; the latter concerns ShopLentor for WordPress with unauthorized modification of data due to a missing capability check on ajax_dismiss in all versions up to 2.8.8. The entry for CVE-2024-4566 is marked as patched. This CVE-4998 entry shoul...
CVE-2023-4859
CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.
CVE-2023-6734
CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.
CVE-2024-3556
CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.
CVE-2022-23967
CVE-2022-23967 has been identified as a duplicate of CVE-2019-15679. Connected sources confirm the underlying issue: TightVNC 1.3.10 contains a heap buffer overflow in InitialiseRFBConnection, enabling potential code execution via network connectivity (CVE-2019-15679). Additional related CVEs in ...
CVE-2021-3648
CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2022-39390
CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...
CVE-2022-44147
CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...