CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Appsmith Unauthenticated Edit-Mode Action Execution and Data Exposure Vulnerability (CVE-2026-24042)
[Affected Scope] Appsmith versions 1.94 and below with publicly accessible applications
[Impact] Unauthenticated attackers can execute unpublished (edit-mode) actions, leading to sensitive data exposure, unauthorized database queries, and side-effect behaviors
[Mitigation] Restrict public access to applications and implement request filtering on reverse proxies or WAFs to block unauthorized edit-mode execution requests
Cisco Smart Licensing Utility (CSLU) Static Administrative Credentials Vulnerability (CVE-2024-20439) Analysis and Hardening Guide
[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0
[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials
[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls
Ivanti EPMM (formerly MobileIron Core) Authentication Bypass and Remote Code Execution Vulnerability (CVE-2023-35082) Urgent Security Advisory
[Affected Scope] Ivanti EPMM (Endpoint Manager Mobile) 11.10 and older, and MobileIron Core 11.2 and older
[Impact] Unauthenticated remote attackers can bypass authentication to access restricted API endpoints, compromise sensitive data, or execute arbitrary commands
[Mitigation] Immediately upgrade to the latest supported release and restrict external access to administrative API endpoints