CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Firewall Management Center (FMC) Insecure Deserialization Vulnerability (CVE-2026-20131, CVSS 10.0) - Remote Code Execution and Root Privilege Escalation
[Affected Scope] Web-based management interface of Cisco Secure Firewall Management Center (FMC) Software.
[Impact] Unauthenticated, remote attackers can execute arbitrary Java code with root privileges by sending crafted serialized Java objects.
[Mitigation] Apply official Cisco security patches immediately and restrict public internet access to the FMC management interface.
Netwrix Auditor Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-31199)
[Affected Scope] Netwrix Auditor server and User Activity Video Recording agents installed on monitored systems
[Impact] Unauthenticated remote attackers can execute arbitrary code with 'NT AUTHORITY\SYSTEM' privileges on affected servers and monitored hosts
[Mitigation] Immediately upgrade Netwrix Auditor to the latest secure version and restrict network access to agent communication ports
Laravel Ignition Debug Mode Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2021-3129)
[Affected Scope] Laravel applications running versions prior to 8.4.2 and utilizing facade/ignition versions prior to 2.5.2 with debug mode (APP_DEBUG=true) enabled
[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server, leading to complete system compromise and data exfiltration
[Mitigation] Upgrade the facade/ignition package to version 2.5.2 or higher, and ensure that Laravel debug mode (APP_DEBUG) is set to 'false' in production environments