CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Linux Kernel af_alg_sendmsg Race Condition Vulnerability Advisory (CVE-2025-39964)
[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.
[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.
[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.
Cisco IOS and IOS XE SNMP Subsystem Stack Overflow Vulnerability (CVE-2025-20352) Technical Advisory
[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services
[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets
[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services
Citrix NetScaler ADC and Gateway Memory Overflow Remote Code Execution (RCE) and DoS Vulnerability (CVE-2025-7775) Urgent Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers
[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance
[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise
Citrix NetScaler ADC and Gateway Memory Overflow Vulnerability (CVE-2025-6543) Critical Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted packets, leading to control flow hijacking, Remote Code Execution (RCE), or Denial of Service (DoS)
[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Citrix, and restrict access to exposed gateway interfaces until patched
Cisco ASA and FTD Management & VPN Web Servers Remote Denial of Service Vulnerability (CVE-2024-20353) Security Advisory
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with management or VPN web server enabled.
[Impact] An unauthenticated, remote attacker can trigger an unexpected device reload by sending a crafted HTTP request, leading to a complete Denial of Service (DoS) condition.
[Mitigation] Apply official Cisco software patches immediately. Restrict access to management interfaces and monitor VPN ports for anomalous HTTP headers as temporary workarounds.
ISC BIND 9 Remote Denial of Service (DoS) via TKEY Query (CVE-2015-5477)
[Affected Scope] DNS servers running ISC BIND 9.9.0 through 9.9.7-P1 and 9.10.0 through 9.10.2-P2.
[Impact] Remote attackers can crash the BIND daemon (named) by sending a specially crafted TKEY query, leading to a complete DNS service outage.
[Mitigation] Immediately upgrade to BIND 9.9.7-P2, 9.10.2-P3, or later versions.