CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cacti remote_agent.php Authentication Bypass and Remote Code Execution (RCE) Vulnerability Analysis (CVE-2022-46169)
[Affected Scope] Cacti versions 1.2.x up to 1.2.22, and 1.3.x development branches
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP header manipulation and execute arbitrary OS commands with the privileges of the web server
[Mitigation] Immediately upgrade Cacti to version 1.2.23 or later, and restrict access to the monitoring interface
Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Router Path Traversal Authentication Bypass Vulnerability (CVE-2021-20090) Analysis and Mitigation Guide
[Affected Scope] Buffalo WSR-2533DHPL2 (firmware version <= 1.02) and WSR-2533DHP3 (firmware version <= 1.24)
[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to gain full administrative control over the device
[Mitigation] Immediately upgrade to the latest official firmware and disable external WAN-side management access
Oracle WebLogic Server Console Remote Code Execution and Authentication Bypass Vulnerability (CVE-2020-14750) Security Advisory
[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0
[Impact] Unauthenticated remote attackers with network access via HTTP can bypass authentication on the administration console and achieve full remote code execution (RCE)
[Mitigation] Immediately apply the official Oracle security patches and restrict network access to the WebLogic Administration Console (/console)
Oracle WebLogic Server Console Remote Code Execution and Authentication Bypass (CVE-2020-14882) Analysis & Mitigation Guide
[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP and gain complete control (RCE) over the Oracle WebLogic Server
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict external network access to the administration console (/console)