CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
SysAid On-Prem Unauthenticated XML External Entity (XXE) Vulnerability (CVE-2025-2775) Security Advisory
[Affected Scope] SysAid On-Prem versions 23.3.40 and below
[Impact] Unauthenticated remote attackers can read arbitrary system files and perform administrator account takeover, leading to full system compromise.
[Mitigation] Immediately upgrade SysAid On-Prem to version 24.4.60 or higher, and restrict external access to the Checkin endpoint prior to patching.
Palo Alto Networks PAN-OS Management Web Interface Authenticated File Read Vulnerability (CVE-2025-0111) Analysis and Mitigation Guide
[Affected Scope] PAN-OS firewalls with the management web interface enabled and accessible via the network (excluding Cloud NGFW and Prisma Access)
[Impact] Authenticated attackers can read sensitive system files on the PAN-OS filesystem that are readable by the 'nobody' user, potentially exposing configuration details
[Mitigation] Apply the latest PAN-OS security patches immediately and restrict management interface access to trusted internal IP addresses
Atlassian Jira Server and Data Center Path Traversal Information Disclosure Vulnerability (CVE-2021-26086) Security Advisory
[Affected Scope] Atlassian Jira Server and Data Center versions before 8.5.14, 8.6.0 before 8.13.6, and 8.14.0 before 8.16.1
[Impact] Unauthenticated remote attackers can exploit a path traversal vulnerability to read sensitive configuration files, such as '/WEB-INF/web.xml'
[Mitigation] Immediately upgrade Jira instances to the patched versions (8.5.14, 8.13.6, 8.16.1, or later) and apply WAF access control rules