CVE-2022-23967

CVE-2022-23967 has been identified as a duplicate of CVE-2019-15679. Connected sources confirm the underlying issue: TightVNC 1.3.10 contains a heap buffer overflow in InitialiseRFBConnection, enabling potential code execution via network connectivity (CVE-2019-15679). Additional related CVEs in ...

CVE-2024-4631

CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.

CVE-2023-5773

CVE-2023-6136 : Exposure of Sensitive Information to an Unauthorized Actor in WordPress Debug Log Manager (plugin) up to version 2.3.0. This CVE is referenced as a duplicate/reservation for CVE-2023-6136 in multiple feeds; the Initial record CVE-2023-5773 is a reserved/duplicate. Public details i...

CVE-2023-30078

CVE-2023-30078 is rejected/not used and does not represent an active vulnerability entry.

CVE-2021-20242

CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...

CVE-2022-27458

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should reference CVE-2022-27447 instead of this candidate...

CVE-2024-1864

CVE-2024-1864 is a duplicate of CVE-2023-2813 and is not a separate vulnerability entry. The connected NUCLEI template for CVE-2023-2813 describes a reflected XSS in WordPress themes (Aapna/Anand/Anfaust/Arendelle/… and more) where the search box reflects results, allowing an unauthenticated atta...

CVE-2021-34250

CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...

CVE-2023-33623

GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...

CVE-2024-1087

CVE-2024-1087 is rejected; this CVE entry is not used and does not represent an active vulnerability.

CVE-2024-2875

CVE-2024-2875 is a rejected/duplicate entry; this CVE is not active and should be replaced by CVE-2024-4258.

CVE-2022-24580

CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.

CVE-2023-46267

CVE-2023-46267 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-3605

CVE-2014-3605 is a rejected/not used CVE and does not represent an active vulnerability entry.

CVE-2021-42248

Removed by vendor...

CVE-2024-1788

CVE-2024-1788 is a duplicate of CVE-2023-2813. The connected NUCLEI template specifies a reflected cross-site scripting (XSS) issue in Wordpress themes caused by the search box reflecting results, enabling an unauthenticated attacker to exploit users who click a crafted link. Affected products in...

CVE-2023-3451

CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...

CVE-2023-5999

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-0884

CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...

CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...