CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Samsung Mobile Devices Clipboard Service Privilege Escalation and Arbitrary File Read/Write Vulnerability (CVE-2021-25337) Analysis & Mitigation Guide
[Affected Scope] Samsung mobile devices running software versions prior to SMR (Samsung Security Maintenance Release) Mar-2021 Release 1
[Impact] Untrusted local applications can bypass sandbox boundaries to read or write sensitive local files, potentially leading to data theft or privilege escalation
[Mitigation] Immediately apply the official Samsung security update (SMR Mar-2021 Release 1 or later)
Cisco ASA and FTD Web Services Interface Directory Traversal Vulnerability (CVE-2020-3452) Analysis & Mitigation Guide
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with WebVPN or AnyConnect features enabled.
[Impact] Unauthenticated, remote attackers can perform directory traversal attacks to read sensitive arbitrary files within the web services file system.
[Mitigation] Immediately apply the official security patches provided by Cisco and restrict access to the web services interface.