6205 matches found
CVE-2024-3556
CVE-2024-3556 is rejected/not used; duplicate of CVE-2024-3557.
CVE-2023-30183
CVE-2023-30183 is a reservation duplicate of CVE-2023-30349; CVE-2023-30349 affects JFinal CMS v5.1.0 and describes a remote code execution via the ActionEnter function. Connected sources confirm RCE details; no patch/version fixes are provided in the supplied documents. Exploitation status and i...
CVE-2022-24580
CVE-2022-24580 is rejected/not used; please reference CVE-2023-24580 instead.
CVE-2023-39168
CVE-2023-39168 is rejected and not used; duplicate of CVE-2023-39167.
CVE-2022-28748
CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.
CVE-2023-0884
CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...
CVE-2023-6092
CVE-2023-6092 entry is rejected/not used according to the description.
CVE-2021-32861
CVE-2021-32856 (and duplicate CVE-2021-32861) pertain to Microweber
CVE-2023-3123
CVE-2023-3123 is rejected/not used per the Initial Description.
CVE-2023-4621
CVE-2023-4621 is a duplicate of CVE-2023-4569. Connected documents identify the underlying issue as a memory leak in nf_tables_api.c (nft_set_catchall_flush) within the Linux kernel’s nft_tables API, which can lead to memory leaks in certain conditions. No exact fixed version or remediation steps...
CVE-2023-5999
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2021-34064
CVE-2021-34064 is a duplicate of CVE-2021-33563 and should reference that entry. Connected data show Koel before 5.1.4 is affected: it lacks login throttling and a password strength policy, and reveals whether a failed login attempt used a valid username. This combination may facilitate brute-for...
CVE-2014-6033
CVE-2014-6033 is a duplicate of CVE-2014-6032. The connected records describe multiple XXE vulnerabilities in the F5 BIG-IP Configuration utility across LTM/ASM/GTM/Link Controller and related products (11.0–11.6.0, 10.0–10.2.4; affected components: Configuration utility, Enterprise Manager). Imp...
CVE-2023-31813
The connected OSV entries detail CVE-2023-2804: a heap-based buffer overflow in libjpeg-turbo (function h2v2_merged_upsample_internal() in jdmrgext.c) triggered by 12-bit data precision; an attacker could craft a 12-bit lossless JPEG image with out-of-range samples, leading to segmentation faults...
CVE-2023-3995
CVE-2023-3995 is rejected/not used; duplicate of CVE-2023-4147.
CVE-2023-39977
CVE-2023-39977 is rejected/not used; reference CVE-2023-3268.
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2023-5619
CVE-2023-5619 is rejected/not used per the initial description.
CVE-2023-5442
CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...