CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Strapi Sensitive Information Disclosure via Query Filter Vulnerability (CVE-2023-22894)
[Affected Scope] All Strapi deployments running version 4.5.5 or earlier.
[Impact] Authenticated attackers with admin panel access can leak sensitive user data, including password hashes and reset tokens, via side-channel inference.
[Mitigation] Immediately upgrade Strapi to version 4.6.0 or later.
D-Link DIR-300 Router Cleartext Password Storage Vulnerability (CVE-2011-4723) Analysis and Mitigation Guide
[Affected Scope] D-Link DIR-300 wireless router devices
[Impact] Adjacent or context-dependent attackers can retrieve plaintext administrator credentials stored on the device, leading to complete compromise of the router
[Mitigation] Since this is a legacy End-of-Life (EoL) device, immediately replace it with a modern supported router, or restrict administrative access to the absolute minimum