Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CISA — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting CISA. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2025-67634 Software Acquisition Guide Supplier Response Web Tool XSS — Software Acquisition Guide ToolCWE-79 4.4 Medium2025-12-12
CVE-2025-35436 CISA Thorium account verification email error handling — ThoriumCWE-248 5.3 Medium2025-09-17
CVE-2025-35435 CISA Thorium download stream divide by zero — ThoriumCWE-369 4.3 Medium2025-09-17
CVE-2025-35434 CISA Thorium does not validate TLS connections to Elasticsearch — ThoriumCWE-295 4.2 Medium2025-09-17
CVE-2025-35433 CISA Thorium does not properly invalidate previously used tokens — ThoriumCWE-613 5.0 Medium2025-09-17
CVE-2025-35432 CISA Thorium does not rate limit account verification email messages — ThoriumCWE-400 5.3 Medium2025-09-17
CVE-2025-35431 CISA Thorium LDAP injection — ThoriumCWE-90 5.4 Medium2025-09-17
CVE-2025-35430 CISA Thorium insecure downloaded file path validation — ThoriumCWE-22 5.0 Medium2025-09-17
CVE-2023-7242 Ethercat Zeek Plugin Out-of-bounds Read — Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for ZeekCWE-125 8.2 High2024-03-01
CVE-2023-7243 Ethercat Zeek Plugin Out-of-bounds Write — Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for ZeekCWE-787 9.8 Critical2024-03-01
CVE-2023-7244 Ethercat Zeek Plugin Out-of-bounds Write — Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Plugin for ZeekCWE-787 9.8 Critical2024-03-01

This page lists every published CVE security advisory associated with CISA. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.