CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Kaseya VSA Credential Disclosure and Authentication Bypass Vulnerability (CVE-2021-30116) Security Advisory
[Affected Scope] Kaseya VSA on-premise installations prior to version 9.5.7
[Impact] Attackers can extract agent credentials to obtain a valid session ID, bypassing authentication to gain unauthorized control over the system
[Mitigation] Immediately upgrade Kaseya VSA to version 9.5.7 or higher, and restrict external access to the dl.asp page
Rockwell Automation Studio 5000 & RSLogix 5000 Hardcoded Cryptographic Key Vulnerability (CVE-2021-22681) Technical Advisory
[Affected Scope] Rockwell Automation Studio 5000 Logix Designer v21 and later, RSLogix 5000 v16 through v20, and associated Logix controllers
[Impact] Unauthenticated remote attackers can obtain the hardcoded cryptographic key, bypass verification mechanisms, and gain unauthorized access to modify controller logic or configurations
[Mitigation] Implement network segmentation, restrict EtherNet/IP ports, transition controller keyswitches to 'Run' mode, and deploy CIP Security where applicable
Zyxel Firewalls and AP Controllers Hardcoded Admin Credentials Vulnerability (CVE-2020-29583) Analysis & Mitigation Guide
[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60
[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')
[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).
Telerik UI for ASP.NET AJAX Cryptographic Weakness Vulnerability Analysis and Mitigation Guide (CVE-2017-9248)
[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP1, and Sitefinity versions prior to 10.0.6412.0
[Impact] Attackers can compromise cryptographic protections to leak the MachineKey, perform arbitrary file uploads/downloads, execute XSS, or compromise ASP.NET ViewState to achieve Remote Code Execution (RCE)
[Mitigation] Upgrade to the latest secure version or manually configure a strong, unique DialogParametersEncryptionKey and MachineKey in web.config
Microsoft Windows Group Policy Preferences (GPP) Credential Disclosure & Privilege Escalation (CVE-2014-1812, MS14-025)
[Affected Scope] Active Directory environments running Windows Vista SP2, 7 SP1, 8, 8.1, and Windows Server 2008 SP2/R2 SP1, 2012 Gold/R2 domain controllers and client systems
[Impact] Remote authenticated domain users can access the SYSVOL share, retrieve encrypted GPP XML files, and decrypt them using a publicly known AES key to obtain domain administrator credentials
[Mitigation] Apply the MS14-025 cumulative security update and permanently delete existing XML configuration files containing the 'cpassword' attribute from the SYSVOL share