CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“3 of 3 advisories (Page 1/1)
CVE-2025-477294.9/MEDIUMEPSS 0.4%CISA KEV
2025-05-08

CVE-2025-47729 Technical Vulnerability Analysis & Patch Advisory (CVSS 4.9)

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-47729

[Impact] The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which i...

[Mitigation] Apply vendor security patches and restrict external network exposure.

CVE-2024-204399.8/CRITICALEPSS 97.1%CISA KEV
2024-09-04

Cisco Smart Licensing Utility (CSLU) Static Administrative Credentials Vulnerability (CVE-2024-20439) Analysis and Hardening Guide

[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0

[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials

[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls

CVE-2021-253716.7/MEDIUMEPSS 0.8%CISA KEV
2021-03-26

Samsung Galaxy DSP Driver Arbitrary ELF Library Loading Vulnerability (CVE-2021-25371) Analysis and Mitigation Guide

[Affected Scope] Samsung devices equipped with DSP (Digital Signal Processor) driver prior to SMR (Security Maintenance Release) Mar-2021 Release 1

[Impact] A local attacker with high privileges can load arbitrary ELF libraries inside the DSP subsystem, potentially leading to complete system compromise and evasion of OS-level security controls

[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse