CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes (CVE-2026-120200)
[Affected Scope] All deployments running Nexterm through version 1.2.2-BETA
[Impact] Authenticated attackers can disrupt, hibernate, resume, or terminate active SSH, RDP, VNC, or SFTP sessions of other users by exploiting missing authorization checks on session lifecycle routes
[Mitigation] Immediately upgrade to the patched version of Nexterm and restrict access to session management API endpoints
Netsweeper Web Administration Reflected XSS Vulnerability (CVE-2015-20130) Advisory
[Affected Scope] Netsweeper versions prior to 4.0.11 and 4.1.0 through 4.1.4.
[Impact] Remote attackers can execute arbitrary JavaScript in the victim's browser, potentially leading to administrative session hijacking.
[Mitigation] Immediately upgrade Netsweeper to version 4.0.11, 4.1.5, or later.
Cal.com Account Takeover via NextAuth Session Update Vulnerability (CVE-2026-23478)
[Affected Scope] Cal.com versions from 3.1.6 to before 6.0.7
[Impact] Attackers can gain full authenticated access to any user's account by supplying a target email address via session.update() without credentials
[Mitigation] Immediately upgrade Cal.com to version 6.0.7 or later