CNA Duplicates

The CVE program consists of multiple CVE Numbering Authorities (CNA) which feed their data into the stream. Once in a while irregularities happen, like duplicate assignments of CVEs for the same vulnerability. Our moderation team identifies these and lists them here. This helps CVE users to determine them quickly and to handle them properly. In most cases CNAs should detect such a duplicate assignment and reject the later CVE entry.

Vendor

Not Defined	32
IROAD	6
witmy	4
Tenda	3
olajowon	2

Identifying all affected vendors is a good starting point for an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Product

IROAD Dash Cam X5	5
IROAD Dash Cam X6	4
witmy my-springsecurity-plus	4
FlatPress	4
Tenda AC18	3

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

ID	Vulnerability	Created	Updated	CVE	Duplicate
299812	IROAD Dash Cam X5/Dash Cam X6 Domain origin validation	03/15/2025	03/18/2025	CVE-2025-2346	CVE-2025-30132
299810	IROAD Dash Cam X5/Dash Cam X6 API Endpoint missing authentication	03/15/2025	03/18/2025	CVE-2025-2344	CVE-2025-30111
299809	IROAD Dash Cam X5/Dash Cam X6 Device Pairing hard-coded credentials	03/15/2025	03/18/2025	CVE-2025-2343	CVE-2025-30110
299808	IROAD X5 Mobile App API Endpoint hard-coded credentials	03/15/2025	03/18/2025	CVE-2025-2342	CVE-2025-30109
299811	IROAD Dash Cam X5/Dash Cam X6 improper authorization	03/15/2025	03/18/2025	CVE-2025-2345	CVE-2025-30107
299807	IROAD Dash Cam X5 SSID default credentials	03/15/2025	03/18/2025	CVE-2025-2341	CVE-2025-30106
303516	fumiao opencms dataPage.jsp path traversal	04/05/2025	04/21/2025	CVE-2025-3317	CVE-2025-28099
295219	olajowon Loggrove page os command injection	02/11/2025	02/21/2025	CVE-2025-1229	CVE-2025-26014
295218	olajowon Loggrove Logfile Update page path traversal	02/11/2025	02/21/2025	CVE-2025-1228	CVE-2025-26013
282090	LinZhaoguan pb-cms Theme Management Module admin#themes cross site scripting	10/28/2024	03/02/2025	CVE-2024-10479	CVE-2024-51229
274937	Linux Kernel v3d out-of-bounds	08/17/2024	03/06/2025	CVE-2024-42264	CVE-2024-49984
252191	NetBox Home Page Configuration config-revisions cross site scripting [Disputed]	01/26/2024	04/20/2025	CVE-2024-0948	CVE-2024-47226
275111	ZZCMS eginfo.php information disclosure	08/19/2024	09/30/2024	CVE-2024-7925	CVE-2024-44820
263348	basecamp trix cross site scripting	05/07/2024	03/31/2025	CVE-2024-34341	CVE-2024-43368
271152	witmy my-springsecurity-plus role sql injection	07/11/2024	07/12/2024	CVE-2024-6679	CVE-2024-40542
271153	witmy my-springsecurity-plus build sql injection	07/11/2024	07/12/2024	CVE-2024-6680	CVE-2024-40541
271154	witmy my-springsecurity-plus dept sql injection	07/11/2024	07/12/2024	CVE-2024-6681	CVE-2024-40540
271111	witmy my-springsecurity-plus user sql injection	07/10/2024	07/12/2024	CVE-2024-6676	CVE-2024-40539
270053	adolph_dudu ratio-swiper parse prototype pollution	07/01/2024	07/01/2024	CVE-2024-39000	CVE-2024-39853
269419	Zorlan SkyCaiji Task cross site scripting	06/21/2024	03/22/2025	CVE-2024-6252	CVE-2024-39242
267365	Evmos calculation	06/06/2024	03/26/2025	CVE-2024-32873	CVE-2024-37159
269698	MAP-OS cross site scripting	06/25/2024	03/22/2025	CVE-2024-36819	CVE-2024-35545
249545	Open5GS InitialUEMessage denial of service	01/03/2024	05/08/2024	CVE-2023-50019	CVE-2024-33382
229419	jizhicms Article cross site scripting	05/19/2023	04/26/2025	CVE-2023-31862	CVE-2024-33338
209431	Tenda AC15/AC18 PowerSaveSet setSmartPowerManagement stack-based overflow	09/23/2022	05/23/2025	CVE-2022-40864	CVE-2024-30613
200818	Tenda AC18 form_fast_setting_wifi_set stack-based overflow	05/26/2022	03/26/2024	CVE-2022-30473	CVE-2024-28551
228048	Tenda AC18 setUsbUnload command injection	05/05/2023	03/26/2024	CVE-2023-30135	CVE-2024-28545
252184	Byzoro Smart S210 Management Platform uploadfile.php unrestricted upload	01/26/2024	04/09/2024	CVE-2024-0939	CVE-2024-28520
259613	PuneethReddyHC Event Management register.php sql injection	04/07/2024	05/14/2025	CVE-2024-3432	CVE-2024-28322
248374	Apache Superset ZIP File resource consumption	12/19/2023	02/14/2024	CVE-2023-46104	CVE-2024-23952
240326	yt-dlp os command injection	09/26/2023	04/21/2025	CVE-2023-40581	CVE-2024-22423
141992	Dahua IPC-HDW1X2X IP address information disclosure	09/19/2019	01/14/2025	CVE-2019-9680	CVE-2024-13131
244080	EventPrime Plugin cross-site request forgery	10/31/2023	04/23/2025	CVE-2023-4251	CVE-2023-5519
239475	Google WebP libwebp heap-based overflow	09/12/2023	04/22/2025	CVE-2023-4863	CVE-2023-5129
191328	mingSoft MCMS New Template Module unrestricted upload	01/21/2022	01/16/2024	CVE-2022-22929	CVE-2023-51282
188960	Ajax.NET Professional Javascript Object cross site scripting	12/23/2021	12/05/2023	CVE-2021-43853	CVE-2023-49289
237404	cockpit cross site scripting	08/17/2023	09/13/2023	CVE-2023-4395	CVE-2023-4433
236213	EmpowerID Multi-Factor Authentication Code information disclosure	08/05/2023	08/30/2023	CVE-2023-4177	CVE-2023-40260
231594	Grav special elements used in a template engine	06/15/2023	07/19/2023	CVE-2023-34253	CVE-2023-37897
241944	Elenos ETG150 FM Transmitter resource injection	10/11/2023	11/07/2023	CVE-2023-45396	CVE-2023-37835
231547	OBS-Studio missing encryption	06/14/2023	07/04/2023	CVE-2023-34585	CVE-2023-36262
232891	LangChain Python PALChain code injection	07/04/2023	07/22/2023	CVE-2023-36258	CVE-2023-36188
232105	bishopfox sliver channel accessible	06/22/2023	08/28/2023	CVE-2023-34758	CVE-2023-35170
231502	UJCMS ZIP Package information disclosure	06/14/2023	07/13/2023	CVE-2023-3231	CVE-2023-34878
230799	SourceCodester Service Provider Management System view_service.php sql injection	06/06/2023	06/30/2023	CVE-2023-3120	CVE-2023-34581
229953	PHPOK admin.php unrestricted upload	05/25/2023	06/17/2023	CVE-2023-2888	CVE-2023-33601
232918	fastify oauth2 cross-site request forgery	07/04/2023	07/04/2023	CVE-2023-35935	CVE-2023-31999
227401	World Wide Broadcast Network AVideo Video Link os command injection	04/25/2023	02/03/2025	CVE-2023-25313	CVE-2023-30842
230464	openSUSE libeconf Config File buffer overflow	06/01/2023	05/13/2025	CVE-2023-22652	CVE-2023-30079
230465	openSUSE libeconf Configuration File buffer overflow	06/01/2023	08/23/2023	CVE-2023-32181	CVE-2023-30078

30 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 30 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!