CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Citrix NetScaler ADC and Gateway Memory Disclosure Vulnerability (CVE-2025-5777, CitrixBleed 2.0) Urgent Security Advisory
[Affected Scope] Citrix NetScaler ADC and Gateway appliances configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can exploit insufficient input validation to read sensitive system memory, potentially exposing active session tokens and credentials
[Mitigation] Immediately apply the official security patches provided by Citrix (CTX693420) and terminate all active user sessions
Microsoft Internet Explorer ASLR Bypass Vulnerability (CVE-2015-0071, MS15-009) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Internet Explorer 9, 10, and 11
[Impact] Attackers can bypass Address Space Layout Randomization (ASLR) protections via crafted web content, significantly increasing the success rate of subsequent Remote Code Execution (RCE) attacks
[Mitigation] Apply the MS15-009 cumulative security update, transition to Microsoft Edge, and enforce system-wide exploit mitigations (Force ASLR)