CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Small Business RV Series Routers SSL VPN Remote Code Execution Vulnerability (CVE-2022-20699) Technical Advisory
[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise via the SSL VPN gateway
[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Cisco, and restrict access to the SSL VPN port from untrusted networks
Linux Kernel RDS Protocol Privilege Escalation Vulnerability (CVE-2010-3904) Technical Analysis and Mitigation Guide
[Affected Scope] Linux kernel versions before 2.6.36 with the Reliable Datagram Sockets (RDS) protocol module enabled
[Impact] Local unprivileged users can exploit this vulnerability via crafted sendmsg and recvmsg system calls to gain full root privileges
[Mitigation] Upgrade the Linux kernel to a patched version, or disable the RDS kernel module by blacklisting it if not required