2362 matches found
CVE-2024-2437
CVE-2024-2437 is a reservation duplicate of CVE-2023-41728; the connected records show this CVE should reference CVE-2023-41728 instead. CVE-2023-41728 describes a Cross-site Scripting (Stored XSS) vulnerability in the Rescue Shortcodes WordPress plugin (Rescue Shortcodes) affecting versions up t...
CVE-2023-38815
CVE-2023-38815 is a reservation duplicate of CVE-2023-40042. Connected sources (NVD/Red Hat/CVE databases and regional feeds) confirm a real vulnerability: TOTOLINK T10_v2, version 5.9c.5061_B20200511, has a stack-based buffer overflow in setStaticDhcpConfig() located in /lib/cste_modules/lan.so....
CVE-2023-37637
CVE-2023-37637 is a reservation duplicate of CVE-2023-38817. The connected Red Hat/NVD entries detail a local privilege escalation in Inspect Element Ltd Echo.ac v5.2.1.0 via a crafted command to the echo_driver.sys component, allowing privilege escalation to NT AUTHORITY\SYSTEM. Public exploit c...
CVE-2022-48138
CVE-2023-26829 describes an authentication bypass in the Password Reset component of Gladinet CentreStack prior to version 13.5.9808, allowing remote attackers to set a new password for any valid user account and bypass authentication. CVE-2022-48138 is a reservation/duplicate entry of CVE-2023-2...
CVE-2022-20128
CVE-2022-20128 is rejected/withdrawn by its CNA and does not represent an active vulnerability entry.
CVE-2022-20128
Removed by vendor...
CVE-2022-21384
CVE-2022-21384 is a duplicate of CVE-2021-39275 per the initial description. Connected sources provide concrete details for CVE-2021-39275: an out-of-bounds write in ap_escape_quotes() in Apache httpd, enabling a remote attacker to crash or potentially execute code. Affected products include all ...
CVE-2021-35684
CVE-2021-35684 is a duplicate of CVE-2022-21306. The connected CVE-2022-21306 describes a vulnerability in Oracle WebLogic Server (Fusion Middleware Core) affecting 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows unauthenticated remote exploitation via standard ports (T3), potentiall...
CVE-2021-30369
CVE-2021-30369 entry is rejected/not used per initial description.
CVE-2023-4998
CVE-2023-4998 corresponds to a GitLab vulnerability where an attacker could abuse scheduled security scan policies to run pipelines as another user, potentially gaining elevated privileges. The issue affects GitLab CE/EE versions 13.12 through 16.2.7 and 16.3 through 16.3.4. The mitigation is to ...
CVE-2019-15797
CVE-2019-15797 entry is rejected/not used and does not represent an active vulnerability.
CVE-2022-44450
CVE-2022-44450 entry is rejected/unused; not an active vulnerability entry.
CVE-2018-1472
CVE-2018-1472 entry is rejected/not used per initial description.
CVE-2022-42986
CVE-2022-42986 is rejected/not used; reference CVE-2023-39122 instead.
CVE-2019-3309
Removed by vendor...
CVE-2023-4998
Removed by vendor...
CVE-2022-0303
Removed by vendor...
CVE-2021-0937
CVE-2021-0937 entry is rejected/not used per the Initial Description.
CVE-2023-0884
CVE-2023-0884 is a reservation duplicate of CVE-2022-3759 and is not an active vulnerability entry; use CVE-2022-3759 for details. Technical details: GitLab CE/EE versions affected are 14.3–15.6.7, 15.7–15.7.6, and 15.8–15.8.1, where an attacker could achieve Denial of Service by uploading crafte...