CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SimpleHelp Remote Support Software Privilege Escalation Vulnerability (CVE-2024-57726) Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions
[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation
[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation
Apache OFBiz Unauthenticated Remote Code Execution (RCE) and Authorization Bypass Advisory (CVE-2024-38856)
[Affected Scope] Apache OFBiz versions up to and including 18.12.14
[Impact] Unauthenticated remote attackers can execute arbitrary screen rendering code and system commands by sending specially crafted HTTP requests
[Mitigation] Immediately upgrade Apache OFBiz to the latest stable version 18.12.15 or higher
D-Link DIR-605 Router Information Disclosure and Credential Theft Vulnerability (CVE-2021-40655) Analysis & Mitigation Guide
[Affected Scope] D-Link DIR-605 B2 Firmware Version 2.01MT and prior
[Impact] Unauthenticated remote attackers can retrieve plaintext administrator credentials by sending a forged POST request to the /getcfg.php page
[Mitigation] Immediately decommission and replace the legacy EOL device, or disable remote WAN management and restrict network access