CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
TeamViewer Hardcoded Shared AES Key Credential Decryption and Privilege Escalation Vulnerability (CVE-2019-18988)
[Affected Scope] TeamViewer Desktop versions v7.0.43148 through v14.7.1965.
[Impact] Attackers can decrypt stored OptionsPasswordAES and Unattended Access passwords using a globally shared, hardcoded AES key, leading to unauthorized remote login and full system takeover.
[Mitigation] Immediately uninstall affected legacy versions and upgrade to the latest secure TeamViewer release.
DotNetNuke (DNN) Remote Code Execution via Weak Encryption and Cookie Deserialization (CVE-2018-15811)
[Affected Scope] DotNetNuke (DNN) Platform versions 9.2.0 through 9.2.1
[Impact] Attackers can exploit weak cryptographic algorithms to decrypt, forge, and inject malicious serialized .NET payloads into cookies, leading to Remote Code Execution (RCE)
[Mitigation] Immediately upgrade DNN Platform to version 9.2.2 or higher, and regenerate the MachineKey in web.config