CVE-2023-6079

CVE-2023-6079 is a duplicate of CVE-2023-40206. Affected product: hwk-fr WordPress plugin “WP 404 Auto Redirect to Similar Post” (versions

CVE-2024-0694

CVE-2024-0694 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-43956

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-37637

CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...

CVE-2023-45665

CVE-2023-45665 is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-46267

CVE-2023-46267 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-2041

CVE-2024-2041 is rejected/not used and does not represent an active vulnerability entry.

CVE-2024-34466

CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...

CVE-2024-4579

CVE-2024-4579 is a reservation/duplicate of CVE-2024-4295. The connected data for CVE-2024-4295 shows an unauthenticated SQL injection in Email Subscribers by Icegram Express

CVE-2024-4631

CVE-2024-4631 is rejected and not used; please refer to CVE-2024-3557 instead.

CVE-2024-4998

CVE-2024-4998 is a reservation/duplicate of CVE-2024-4566; the latter concerns ShopLentor for WordPress with unauthorized modification of data due to a missing capability check on ajax_dismiss in all versions up to 2.8.8. The entry for CVE-2024-4566 is marked as patched. This CVE-4998 entry shoul...

CVE-2023-4859

CVE-2023-4859 is rejected; do not use this candidate number, reference CVE-2024-27957 instead.

CVE-2023-6734

CVE-2023-6734 is rejected; reference CVE-2024-33679; this candidate is not used.

CVE-2024-3556

CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.

CVE-2016-2144

CVE-2016-2144 is rejected/not used; it does not represent an active vulnerability entry and references CVE-2015-0284.

CVE-2015-5155

CVE-2015-5155 is rejected/not used and does not represent an active vulnerability entry.

CVE-2014-3605

CVE-2014-3605 is a rejected/not used CVE and does not represent an active vulnerability entry.

CVE-2021-3648

CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.

CVE-2021-20242

CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...

CVE-2021-34250

CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...