CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Zimbra Collaboration Suite (ZCS) Attachment Link Handling XSS Vulnerability (CVE-2018-6882) Analysis and Mitigation Guide
[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.7 Patch 1 and 8.8.x versions prior to 8.8.7
[Impact] Remote attackers can execute arbitrary web script or HTML in the victim's browser context via a manipulated Content-Location header in an email attachment, leading to session hijacking and account takeover
[Mitigation] Immediately upgrade Zimbra Collaboration Suite to the latest patched version (8.7 Patch 1, 8.8.7, or later)
Cisco ASA WebVPN Login Page Cross-Site Scripting (XSS) Vulnerability (CVE-2014-2120) Analysis and Mitigation Guide
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software with WebVPN (SSL VPN) feature enabled
[Impact] Remote attackers can execute arbitrary JavaScript or HTML code in the context of the user's browser session, leading to session hijacking or credential theft
[Mitigation] Apply official Cisco software updates, restrict WebVPN access via ACLs, and monitor HTTP request logs
D-Link DSL-2760U Gateway Multiple Parameter Cross-Site Scripting (XSS) Vulnerability (CVE-2013-5223)
[Affected Scope] D-Link DSL-2760U Gateway (Rev. E1) hardware and firmware.
[Impact] Remote authenticated attackers can inject arbitrary web script or HTML via multiple parameters, leading to administrator session hijacking and device compromise.
[Mitigation] Apply the latest official firmware patches, disable external WAN management interfaces, and restrict access to trusted IP ranges.