CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Palo Alto Networks PAN-OS Management Web Interface Authenticated File Read Vulnerability (CVE-2025-0111) Analysis and Mitigation Guide
[Affected Scope] PAN-OS firewalls with the management web interface enabled and accessible via the network (excluding Cloud NGFW and Prisma Access)
[Impact] Authenticated attackers can read sensitive system files on the PAN-OS filesystem that are readable by the 'nobody' user, potentially exposing configuration details
[Mitigation] Apply the latest PAN-OS security patches immediately and restrict management interface access to trusted internal IP addresses
QNAP Photo Station Externally-Controlled Reference Vulnerability (CVE-2022-27593) Technical Advisory
[Affected Scope] QNAP Photo Station running on QTS 5.0.1, 5.0.0, 4.5.x, 4.3.6, 4.3.3, and 4.2.6
[Impact] Unauthenticated remote attackers can modify critical system files, potentially leading to complete device compromise
[Mitigation] Immediately update Photo Station to the patched versions (6.1.2, 6.0.22, 5.7.18, 5.4.15, 5.2.14 or later)