5321 matches found
CVE-2024-5609
CVE-2024-5609 is a rejected candidate; reference CVE-2023-6966 instead.
CVE-2023-6920
CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.
CVE-2024-1865
The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...
CVE-2023-26931
Removed by vendor...
CVE-2022-42986
CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.
CVE-2023-39195
CVE-2023-39195 is a duplicate of CVE-2023-42755. The underlying issue is an out-of-bounds read in the IPv4 RSVP classifier (rsvp_classify) in the Linux kernel, which can crash the system or cause denial of service. Local privilege context is noted; the duplicate entry points to mitigation through...
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2023-45665
CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-39977
CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.
CVE-2022-28748
CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.
CVE-2015-5155
CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-1992
CVE-2024-1992 is a duplicate of CVE-2024-2306. Connected record CVE-2024-2306 documents a Stored XSS in the Revslider WordPress plugin via SVG uploads, affecting all versions up to 6.6.20. Exploitation requires authenticated access (administrators by default, with broader access potentially via c...
CVE-2022-39390
CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...
CVE-2023-6115
CVE-2023-6115 entry is rejected/not used (duplicate CVE) per description.
CVE-2023-6734
CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.
CVE-2024-3556
CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.
CVE-2024-1373
Summary : CVE-2023-46209 is an unauthenticated reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin G5Theme Grid Plus – Unlimited grid , affecting versions ≤ 1.3.2. The issue allows script injection via reflected input and is observed in the plugin stack described in multipl...
CVE-2024-2437
CVE-2024-2437 is a reservation duplicate of CVE-2023-41728; the connected records show this CVE should reference CVE-2023-41728 instead. CVE-2023-41728 describes a Cross-site Scripting (Stored XSS) vulnerability in the Rescue Shortcodes WordPress plugin (Rescue Shortcodes) affecting versions up t...
CVE-2023-37637
CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...