CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
PaperCut NG/MF Cross-Site Request Forgery (CSRF) to Remote Code Execution (RCE) Vulnerability (CVE-2023-2533) Security Advisory
[Affected Scope] PaperCut NG and MF systems with an active administrator login session.
[Impact] Attackers can trick administrators into clicking malicious links, leading to unauthorized security setting modifications and arbitrary code execution.
[Mitigation] Apply the official vendor security patches immediately and restrict external access to the admin interface.
D-Link DIR-600 Router Multiple CSRF Vulnerabilities (CVE-2014-100005) Technical Advisory
[Affected Scope] D-Link DIR-600 router (hardware revision Bx) with firmware versions prior to 2.17b02.
[Impact] Remote attackers can hijack administrator sessions to create unauthorized admin accounts, enable remote management, apply malicious configurations, or trigger arbitrary ping requests.
[Mitigation] Upgrade to firmware version 2.17b02 or later, disable remote management, and restrict access to the administration interface.
Cisco IOS 12.4 HTTP Administration Component Cross-Site Request Forgery (CSRF) Remote Command Execution (CVE-2008-4128)
[Affected Scope] Cisco 871 Integrated Services Routers (ISR) running Cisco IOS 12.4 with the HTTP Administration component enabled.
[Impact] Remote attackers can execute arbitrary commands with privilege level 15 by tricking an authenticated administrator into visiting a malicious link, leading to complete device compromise.
[Mitigation] Disable the HTTP/HTTPS server on the router, restrict access using IP-based Access Control Lists (ACLs), or upgrade to a patched Cisco IOS release.