CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2025-405368.1/HIGHEPSS 73.6%CISA KEV

2026-01-28

SolarWinds Web Help Desk Security Control Bypass Vulnerability (CVE-2025-40536) Urgent Security Advisory

[Affected Scope] All SolarWinds Web Help Desk (WHD) versions prior to 2026.1.

[Impact] Unauthenticated remote attackers can bypass internal security controls, gaining unauthorized access to restricted functionalities and sensitive data.

[Mitigation] Immediately upgrade to the latest secure version (2026.1 or higher) and restrict external access until patched.

CISA-KEV security-control-bypass unauthenticated-access CWE-693 kev-active-exploitation

Full Advisory & Mitigation

CVE-2021-306618.8/HIGHEPSS 4.5%CISA KEV

2021-09-08

Apple WebKit Use-After-Free Vulnerability Leading to Remote Code Execution (CVE-2021-30661)

[Affected Scope] Systems running Safari prior to 14.1, iOS prior to 12.5.3, iOS/iPadOS prior to 14.5, watchOS prior to 7.4, tvOS prior to 14.5, and macOS Big Sur prior to 11.3

[Impact] Processing maliciously crafted web content may trigger a Use-After-Free vulnerability in the WebKit rendering engine, allowing remote attackers to execute arbitrary code on the target device. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

CWE-416 use-after-free webkit rce kev-active-exploitation

Full Advisory & Mitigation