CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SolarWinds Serv-U Remote Memory Escape Remote Code Execution (RCE) Vulnerability (CVE-2021-35211) Technical Advisory
[Affected Scope] SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before version 15.2.3 HF2
[Impact] Unauthenticated remote attackers can exploit this vulnerability to gain SYSTEM-level privileged access and execute arbitrary code on the host machine
[Mitigation] Immediately upgrade to Serv-U version 15.2.3 HF2 or later, and restrict external access to the service ports
Adobe Flash Player Use-After-Free Remote Code Execution Vulnerability (CVE-2018-4878) Security Advisory
[Affected Scope] Adobe Flash Player versions prior to 28.0.0.161 (specifically affecting Primetime SDK components)
[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by tricking them into opening crafted Flash content
[Mitigation] Upgrade Adobe Flash Player to version 28.0.0.161 or later, or completely uninstall/disable Flash Player across the enterprise