5979 matches found
CVE-2024-1865
The CVE-2024-1865 entry is a duplicate of CVE-2023-2813. Public data in connected documents describe a reflected XSS in several WordPress themes mediated by the search box, allowing an unauthenticated attacker to exploit users via a malicious link. Affected themes include Aapna (1.3), Anand (1.2)...
CVE-2022-42986
CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.
CVE-2023-6920
CVE-2023-6920 is rejected/not used; this entry duplicates CVE-2023-6927.
CVE-2023-26931
Removed by vendor...
CVE-2023-30079
CVE-2023-30079 is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-3648
CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.
CVE-2024-1998
CVE-2024-1998 is a reservation/duplicate of CVE-2024-1795 and should be treated as such; the active vulnerability is CVE-2024-1795 for HUSKY – Products Filter Professional for WooCommerce (WordPress). The issue is an authenticated SQL Injection via the name parameter in the woof shortcode in all ...
CVE-2023-4859
CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.
CVE-2023-2918
CVE-2023-2918 is rejected/not used per the Initial Description.
CVE-2024-27084
CVE-2024-27084 is a duplicate of CVE-2024-1631. The underlying issue is insecure key generation in Ed25519KeyIdentity.generate used by a library (notably in DFINITY agent-js). Reported impact: compromised private keys could allow loss of funds or loss of control over canisters. Remediation noted ...
CVE-2024-34466
CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...
CVE-2024-2545
CVE-2024-2545 is a duplicate of CVE-2024-1730 and has been marked as Rejected/not to be used; refer to CVE-2024-1730 for the actual vulnerability context (Stored XSS in Prime Slider – Addons For Elementor WordPress plugin up to v3.14.0 due to insufficient input sanitization and output escaping).
CVE-2023-4621
CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...
CVE-2021-32861
CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber
CVE-2023-39168
CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.
CVE-2024-27692
The CVE-2024-27692 entry, treated as a duplicate of CVE-2024-22939, is tied to a Cross Site Request Forgery in FlyCms v1.0. The vulnerability is exploitable via the system/article/category_edit component, enabling a remote attacker to execute arbitrary code. Public details across connected source...
CVE-2023-26823
CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.
CVE-2023-43764
CVE-2023-43762: Unauthenticated Remote Code Execution via the web server (backend) affecting WithSecure Policy Manager 15 and Policy Manager Proxy 15. CVE-2023-43764 is a duplicate/withdrawn entry; reference CVE-2023-43762. No exploitation details or mitigations are provided in the supplied docum...