CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft SharePoint Server Improper Authentication Spoofing Vulnerability (CVE-2025-49706) Security Advisory
[Affected Scope] On-premises deployments of Microsoft SharePoint Server
[Impact] Unauthenticated remote attackers can bypass authentication mechanisms to perform network-based spoofing, potentially accessing sensitive internal data
[Mitigation] Immediately apply the official Microsoft security updates and restrict external network access to SharePoint web ports
Hikvision IP Cameras and PTZ Cameras Improper Authentication Vulnerability (CVE-2017-7921) Technical Advisory
[Affected Scope] Hikvision DS-2CD2xx2F-I, DS-2CD2xx0F-I, DS-2CD2xx2FWD, DS-2CD4x2xFWD, DS-2CD4xx5, DS-2DFx, and DS-2CD63xx series IP camera devices
[Impact] Unauthenticated remote attackers can bypass authentication mechanisms via crafted HTTP requests to escalate privileges and gain unauthorized access to sensitive system configuration and credentials
[Mitigation] Immediately upgrade device firmware to the latest patched version and restrict access to the camera management interface from the public internet