CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
DAEMON Tools Lite Official Installer Supply Chain Attack and Trojanized Binaries (CVE-2026-8398)
[Affected Scope] DAEMON Tools Lite Windows versions 12.5.0.2421 through 12.5.0.2434 distributed between April 8, 2026, and May 5, 2026
[Impact] Attackers compromised the vendor's infrastructure to distribute trojanized binaries signed with a legitimate certificate, bypassing security controls to establish backdoor access
[Mitigation] Immediately uninstall the compromised versions, perform a full system malware scan, and reinstall the clean, patched version from the official vendor
Cisco Smart Licensing Utility (CSLU) Static Administrative Credentials Vulnerability (CVE-2024-20439) Analysis and Hardening Guide
[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0
[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials
[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls
D-Link End-of-Life (EOL) NAS Devices Remote Code Execution and Backdoor Vulnerability (CVE-2024-3273) Security Advisory
[Affected Scope] All firmware versions of End-of-Life (EOL) D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L
[Impact] Unauthenticated remote attackers can leverage hardcoded credentials and inject arbitrary system commands to achieve full system compromise
[Mitigation] Since these products are no longer supported, it is strongly recommended to immediately retire and replace the affected devices
D-Link End-of-Life (EOL) NAS Hard-Coded Credentials Vulnerability (CVE-2024-3272) Technical Advisory
[Affected Scope] All firmware versions of legacy D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L.
[Impact] Remote unauthenticated attackers can bypass authentication using hard-coded credentials, leading to complete system compromise and arbitrary code execution.
[Mitigation] Since these devices are End-of-Life (EOL) and will not receive security patches, they must be immediately decommissioned and replaced.
Zyxel Firewalls and AP Controllers Hardcoded Admin Credentials Vulnerability (CVE-2020-29583) Analysis & Mitigation Guide
[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60
[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')
[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).
Webmin password_change.cgi Unauthenticated Remote Command Execution (RCE) (CVE-2019-15107)
[Affected Scope] Webmin versions 1.920 and prior (with password change feature enabled)
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP POST request.
[Mitigation] Immediately upgrade Webmin to the latest secure version (1.930 or higher) or disable the password_change.cgi script.
Juniper ScreenOS Remote Administrative Access Backdoor Vulnerability (CVE-2015-7755) Analysis and Mitigation Guide
[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20
[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password
[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access