CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Citrix NetScaler ADC and Gateway Memory Overflow Remote Code Execution (RCE) and DoS Vulnerability (CVE-2025-7775) Urgent Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers
[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance
[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise
Citrix NetScaler ADC and Gateway Memory Overflow Vulnerability (CVE-2025-6543) Critical Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted packets, leading to control flow hijacking, Remote Code Execution (RCE), or Denial of Service (DoS)
[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Citrix, and restrict access to exposed gateway interfaces until patched
Cisco IP Phone Web Server Remote Code Execution and DoS Vulnerability (CVE-2020-3161) Technical Advisory
[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition
[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs