CVE-2014-3605

CVE-2014-3605 is a rejected/not used CVE and does not represent an active vulnerability entry.

CVE-2022-28748

CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.

CVE-2021-3648

CVE-2021-3648 entry is rejected/not used; reference CVE-2021-3530 instead.

CVE-2021-20242

CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...

CVE-2021-34250

CVE-2021-33396 describes a Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4 that allows an attacker to change the password or other information of an arbitrary account via index.php. The vulnerability is documented across multiple feeds; the Red Hat/NVD entries corroborate the s...

CVE-2021-46849

CVE-2021-46849 is rejected/not used; duplicate of CVE-2021-29421.

CVE-2022-39390

CVE-2022-39390 is a reservation duplicate of CVE-2020-36534 and should reference CVE-2020-36534 instead. Connected CVE data show the underlying issue is a CSRF vulnerability in easyii CMS, specifically affecting an unknown function at /admin/sign/out, with remote exploitation and the exploit-publ...

CVE-2022-44147

CVE-2022-44147 is a reserved/duplicate entry that should reference CVE-2019-16891. Connected records confirm CVE-2019-16891 describes remote command execution in Liferay Portal CE 6.x via deserialization of a JSON payload (e.g., Liferay Portal CE 6.2.5). The duplicate relationship indicates CVE-2...

CVE-2023-22369

This CVE-2023-22369 entry is rejected and not used; reference CVE-2023-25011.

CVE-2021-32861

CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber

CVE-2023-0884

CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...

CVE-2021-34064

CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...

CVE-2022-24580

CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.

CVE-2023-26823

CVE-2023-26823 is rejected and not used; please reference CVE-2023-0783 instead.

CVE-2023-3451

CVE-2023-32297 corresponds to a path traversal (Local File Inclusion) vulnerability in the WordPress LWS Affiliation plugin up to version 2.2.6. Affected product: WordPress/LWS Affiliation (plugin). Vulnerable component: path handling leading to restricted directory traversal. Impact, per sources...

CVE-2023-39190

CVE-2023-39190 is a duplicate of CVE-2023-31436 per the description. Connected documents provide technical context for CVE-31436 (heap/out-of-bounds in the Linux kernel QFQ subsystem) and note that patched versions exist for affected kernels (e.g., 5.10.x series). No specific product/version impa...

CVE-2023-4026

CVE-2023-4026 is a duplicate of CVE-2023-4024. Red Hat’s entry for CVE-2023-4024 describes a WordPress vulnerability in the Radio Player plugin where unauthenticated attackers can modify data due to a missing capability check on the delete_player function in versions up to 2.0.73, enabling unauth...

CVE-2022-42986

CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.

CVE-2024-33331

CVE-2024-33891 (linked to CVE-2024-33331) describes a vulnerability in Delinea Secret Server prior to version 11.7.000001 that allows authentication bypass via the SOAP API (SecretServer/webservices/SSWebService.asmx). The issue is tied to a hardcoded key, the Admin user using the integer 2, and ...

CVE-2014-6033

CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...