CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Ray AI Compute Engine DNS Rebinding Remote Code Execution Vulnerability (CVE-2025-62593)
[Affected Scope] Developers running Ray AI compute engine versions prior to 2.52.0 in local or development environments
[Impact] Remote Code Execution (RCE) on the developer's machine via DNS rebinding and browser-based request forgery when visiting malicious websites or viewing malvertisements
[Mitigation] Immediately upgrade the Ray package to version 2.52.0 or higher
Cisco IOS 12.4 HTTP Administration Component Cross-Site Request Forgery (CSRF) Remote Command Execution (CVE-2008-4128)
[Affected Scope] Cisco 871 Integrated Services Routers (ISR) running Cisco IOS 12.4 with the HTTP Administration component enabled.
[Impact] Remote attackers can execute arbitrary commands with privilege level 15 by tricking an authenticated administrator into visiting a malicious link, leading to complete device compromise.
[Mitigation] Disable the HTTP/HTTPS server on the router, restrict access using IP-based Access Control Lists (ACLs), or upgrade to a patched Cisco IOS release.