CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2025-406026.6/MEDIUMEPSS 2.8%CISA KEV
2025-12-18

SonicWall SMA1000 Appliance Management Console (AMC) Local Privilege Escalation Vulnerability (CVE-2025-40602) Security Advisory

[Affected Scope] SonicWall SMA1000 appliances utilizing the Appliance Management Console (AMC)

[Impact] High-privileged attackers can exploit insufficient authorization to escalate privileges to root, leading to complete system compromise

[Mitigation] Apply the official security patches immediately and restrict network access to the management console

CVE-2024-388139.8/CRITICALEPSS 17.4%CISA KEV
2024-09-17

VMware vCenter Server Remote Privilege Escalation to Root Vulnerability (CVE-2024-38813) Security Advisory

[Affected Scope] VMware vCenter Server 7.0 and 8.0 families, VMware Cloud Foundation 4.x and 5.x families

[Impact] An unauthenticated attacker with network access can escalate privileges to root by sending a specially crafted network packet

[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U3b or later, 7.0 U3t or later) as recommended by Broadcom

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse