CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Kaseya VSA Credential Disclosure and Authentication Bypass Vulnerability (CVE-2021-30116) Security Advisory
[Affected Scope] Kaseya VSA on-premise installations prior to version 9.5.7
[Impact] Attackers can extract agent credentials to obtain a valid session ID, bypassing authentication to gain unauthorized control over the system
[Mitigation] Immediately upgrade Kaseya VSA to version 9.5.7 or higher, and restrict external access to the dl.asp page
Fortinet FortiOS and FortiProxy SSL VPN Path Traversal Vulnerability (CVE-2018-13379) Security Advisory
[Affected Scope] Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7, 5.4.6 to 5.4.12, and specific FortiProxy versions with SSL VPN web portal enabled
[Impact] Unauthenticated remote attackers can download arbitrary system files (including active session credentials) via specially crafted HTTP requests, leading to full network compromise
[Mitigation] Immediately upgrade FortiOS/FortiProxy firmware to the patched versions, terminate active SSL VPN sessions, and enforce a global password reset