CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...

CVE-2023-39168

CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.

CVE-2023-6920

CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.

CVE-2024-1865

The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...

CVE-2023-38815

CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....

CVE-2015-5155

CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-35825

This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.

CVE-2024-24403

CVE-2024-30176 affects Logpoint prior to 7.4.0. An attacker can enumerate a valid usernames list by using publicly exposed URLs of shared widgets. Remediation: update to Logpoint 7.4.0 or later. Note: CVE-2024-24403 is a reservation duplicate of CVE-2024-30176; the 24403 entry has no independent ...

CVE-2023-45665

CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-43956

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-6115

CVE-2023-6115 entry is rejected/not used (duplicate CVE) per description.

CVE-2023-31508

This CVE (CVE-2023-31508) is a duplicate of CVE-2020-15178 for the PrestaShop contactform module. Affected: prestashop/contactform before version 4.3.0. Root cause: the message field was not properly escaped, enabling injection of JavaScript into a victim’s browser via the contact form. Impact: a...

CVE-2023-5442

CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...

CVE-2023-5619

CVE-2023-5619 is rejected/not used per the initial description.

CVE-2023-6734

CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.

CVE-2016-2144

CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.

CVE-2024-4579

CVE-2024-4579 is a reservation/duplicate of CVE-2024-4295. The connected data for CVE-2024-4295 shows an unauthenticated SQL injection in Email Subscribers by Icegram Express

CVE-2023-3995

CVE-2023-3995 is rejected/not used; duplicate of CVE-2023-4147.

CVE-2023-39977

CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.

CVE-2014-6033

CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...