CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco ASA and FTD SSL VPN Remote Denial of Service Vulnerability (CVE-2026-20349)
[Affected Scope] Cisco Secure Firewall ASA and FTD Software with Remote Access SSL VPN service enabled
[Impact] Unauthenticated, remote attackers can cause an unexpected device reload, leading to a complete Denial of Service (DoS) condition
[Mitigation] Immediately upgrade to the patched software versions recommended in the Cisco Security Advisory
Citrix NetScaler ADC and Gateway Memory Overflow Vulnerability (CVE-2026-8452) Critical Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)
[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers
SolarWinds Serv-U Unauthenticated Remote Denial of Service (DoS) Vulnerability (CVE-2026-28318) Analysis and Mitigation Guide
[Affected Scope] SolarWinds Serv-U file transfer server versions prior to 15.5.4 Hotfix 1
[Impact] Unauthenticated remote attackers can crash the Serv-U service instantly by sending specially crafted HTTP POST requests utilizing 'Content-Encoding: deflate'
[Mitigation] Immediately apply the official security patch (15.5.4 Hotfix 1 or later) or implement WAF rules to block specific compression headers
KNX Devices BCU Key Lockout Vulnerability (CVE-2023-4346) Analysis and Mitigation Guide
[Affected Scope] KNX-based smart home and building automation devices supporting KNX Connection Authorization and Option 1
[Impact] Attackers can set an unauthorized BCU key via network or physical access, permanently locking and bricking the device (Denial of Service)
[Mitigation] Restrict network exposure of KNX IP interfaces, enable KNX Secure features, and enforce strict physical access controls
Red Hat and Linux libuser /etc/passwd Direct Modification Vulnerability (CVE-2015-3246) Advisory
[Affected Scope] Linux systems utilizing libuser versions before 0.56.13-8 and 0.60 before 0.60-7, specifically via the userhelper utility in the usermode package
[Impact] Local attackers can cause a Denial of Service (DoS) by corrupting the /etc/passwd file, or combine this with CVE-2015-3245 to achieve full root privilege escalation
[Mitigation] Immediately update the libuser and usermode packages to the latest patched versions using your system package manager