CVE-2002-1261

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1292. Reason: This candidate is a reservation duplicate of CVE-2002-1292. Notes: All CVE users should reference CVE-2002-1292 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2002-1259

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2002-1286. Reason: This candidate is a reservation duplicate of CVE-2002-1286. Notes: All CVE users should reference CVE-2002-1286 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2002-1259

CVE-2002-1259 is a reservation duplicate of CVE-2002-1286; there are no separate details for 1259. The connected records describe CVE-2002-1286: The Microsoft Java implementation in Internet Explorer allows remote attackers to steal cookies and execute script in a different security context via a...

Exploitable pine heap overflow (Re: Remote pine Denial of Service)

Dear Linus Sjberg, There is a classic and probably exploitable heap overflow in bldaddr.c addrliststring. else char charset = NULL; list = char fsgetsizetestsizeadrlist; list0 = '0'; rfc822writeaddressdecodelist, adrlist, verbose ? NULL : &charset, doquote; ifcharset fsgivevoid &charset; estsize...

CVE-2002-1191

The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001...

CVE-2002-1191

The Sabserv client component in Sabre Desktop Reservation Software (versions 4.2–4.4) is vulnerable to remote denial of service caused by malformed input sent to TCP port 1001. The available sources confirm the affected component and the impact (DoS), but do not provide a patch version or remedia...

CVE-2002-1191

The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001...

CVE-2002-0646

CVE-2002-0646 is a reservation duplicate of CVE-2002-0371. Connected documents provide concrete details for CVE-2002-0371: a buffer overflow in gopher client handling for Microsoft Internet Explorer 5.1–6.0, Proxy Server 2.0, or ISA Server 2000 that allows remote code execution via a crafted goph...

CVE-2023-5619

CVE-2023-5619 is rejected/not used per the initial description.

CVE-2023-33623

GL.iNet devices prior to firmware 3.216 are affected by CVE-2023-31478, where an unauthenticated API endpoint (/api/router/mesh/status) leaks Wi‑Fi configuration details (SSID and key). The duplicate CVE-2023-33623 is a reservation of CVE-31478. Impact is exposure of credentials and network confi...

CVE-2024-2167

This CVE-2024-2167 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2019-15798

CVE-2019-15798 entry is rejected/not used.

CVE-2023-5442

CVE-2023-6991 corresponds to a WordPress plugin vulnerability in JSM file_get_contents() Shortcode (pre-2.7.1). The issue: a shortcode parameter is not validated before the plugin makes an external request, allowing users with the Contributor role and above to trigger SSRF. Affected: WordPress JS...

CVE-2020-35159

CVE-2020-35159 entry is rejected/not used; it does not represent an active vulnerability entry.

CVE-2023-30183

CVE-2023-30183 is a reservation duplicate of CVE-2023-30349; CVE-2023-30349 affects JFinal CMS v5.1.0 and describes a remote code execution via the ActionEnter function. Connected sources confirm RCE details; no patch/version fixes are provided in the supplied documents. Exploitation status and i...

CVE-2021-20242

CVE-2021-20176 describes a divide-by-zero flaw in ImageMagick (gem.c) affecting 6.9.11-57 and 7.0.10-57. The highest threat is to availability due to undefined behavior when processing crafted files. Connected advisories confirm real-world references to ImageMagick fixes (e.g., Debian LTS advisor...

CVE-2023-35825

This CVE entry is rejected; refer to CVE-2023-3141 instead; it is not an active vulnerability entry.

CVE-2024-0694

CVE-2024-0694 is rejected/not used and does not represent an active vulnerability entry.

CVE-2022-28748

CVE-2022-28748 is rejected/not used; reference CVE-2022-2964 instead; this ID is not active.

CVE-2024-34466

CVE-2024-34467 affects ThinkPHP 8.0.3, where XSS can be exploited due to inadequate filtering of function argument values in think_exception.tpl. Some sources also note possible disclosure of the PHPSESSION cookie via error output. Remediation details are not enumerated in these documents; one PT...