CVE Vulnerability Advisory Database

[Affected Scope] Apache Tomcat versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, 9.0.0.M1 through 9.0.98, and EOL 8.5.0 through 8.5.100.

[Impact] Attackers can bypass path validation via internal dot path equivalence, allowing them to inject malicious content into sensitive files or trigger remote code execution (RCE) via session deserialization.

[Mitigation] Immediately upgrade to patched versions (11.0.3, 10.1.35, or 9.0.99) and ensure the Default Servlet's 'readonly' parameter is set to 'true'.

[Affected Scope] NAKIVO Backup & Replication versions prior to 11.0.0.88174

[Impact] Unauthenticated remote attackers can exploit absolute path traversal to read arbitrary system files, potentially leading to enterprise-wide Remote Code Execution (RCE) due to cleartext credentials stored in PhysicalDiscovery.

[Mitigation] Immediately upgrade NAKIVO Backup & Replication to version 11.0.0.88174 or later and restrict external access.

[Affected Scope] XWiki Platform versions prior to 15.10.11, 16.4.1, and 16.5.0RC1

[Impact] Unauthenticated remote attackers can execute arbitrary Groovy code via the SolrSearch API, leading to complete compromise of the host system.

[Mitigation] Immediately upgrade to patched versions (15.10.11, 16.4.1, 16.5.0RC1 or later) or apply the recommended XML macro workaround.

[Affected Scope] Trimble Cityworks versions prior to 15.8.9 and Cityworks with Office Companion versions prior to 23.10

[Impact] Authenticated attackers can exploit a deserialization vulnerability (CWE-502) to execute arbitrary code with system privileges on the Microsoft IIS web server

[Mitigation] Immediately upgrade to patched versions (Cityworks 15.8.9+ or Office Companion 23.10+) and restrict IIS access controls

[Affected Scope] Digiever DS-2105 Pro devices running firmware version 3.1.0.71-11 and prior (including End-of-Life products)

[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the vulnerable CGI script

[Mitigation] Immediately isolate affected devices from the public internet and restrict access using firewalls or WAF rules

[Affected Scope] Advantive VeraCore through version 2025.1.0 affecting the timeoutWarning.asp component

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via the PmSess1 parameter, leading to unauthorized data exposure

[Mitigation] Apply the official vendor security patch immediately, or implement WAF rules to block malicious payloads targeting the affected parameter

[Affected Scope] Advantive VeraCore solutions prior to version 2024.4.2.1

[Impact] Remote authenticated attackers can upload malicious files to unintended web-accessible directories via upload.aspx, leading to arbitrary code execution

[Mitigation] Immediately upgrade VeraCore to version 2024.4.2.1 or later, and restrict execution permissions on upload directories

[Affected Scope] Craft CMS 4.x (prior to 4.13.8) and 5.x (prior to 5.5.8) installations where the security key has been compromised

[Impact] Attackers can leverage the compromised security key to forge serialized payloads, leading to arbitrary Remote Code Execution (RCE) on the host server

[Mitigation] Immediately upgrade Craft CMS to version 4.13.8 or 5.5.8 (or higher) and rotate the CRAFT_SECURITY_KEY

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.

[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.

[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior

[Impact] Unauthenticated remote attackers can download arbitrary sensitive files, including server configuration files, secrets, and hashed user credentials, via crafted HTTP requests

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and restrict external access to the console until patched

[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions

[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-13160

[Impact] Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-0282

[Impact] A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neu...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Craft CMS versions 3.x, 4.x, and 5.x running on environments where 'register_argc_argv' is enabled in php.ini

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system control by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Craft CMS to patched versions (3.9.14, 4.13.2, or 5.5.2 or higher) and disable 'register_argc_argv' in php.ini

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24

[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.

[Affected Scope] Microsoft Partner Center Portal (Partner.Microsoft.com) services and associated API endpoints

[Impact] An unauthenticated remote attacker can elevate privileges over the network, potentially gaining administrative control over partner accounts and sensitive tenant data

[Mitigation] As this is a cloud-hosted service, Microsoft has applied server-side mitigations; however, organizations must immediately audit Partner Center API integrations, permissions, and admin logs

[Affected Scope] ProjectSend file sharing platform versions prior to r1720

[Impact] Unauthenticated remote attackers can bypass authentication via options.php to modify application configurations, create unauthorized accounts, upload webshells, and execute arbitrary code

[Mitigation] Immediately upgrade ProjectSend to version r1720 or later, and restrict external access to options.php as a temporary workaround

[Affected Scope] Oracle Supply Chain - Oracle Agile PLM Framework version 9.3.6 (Software Development Kit, Process Extension component)

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to gain unauthorized access to critical data or complete access to all accessible data within the framework

[Mitigation] Immediately apply the official security patches provided by Oracle and restrict external HTTP/HTTPS access to the affected system

[Affected Scope] MDaemon Email Server versions prior to 24.5.1c with Webmail enabled

[Impact] Remote attackers can execute arbitrary JavaScript code in the context of a victim's browser session by sending a specially crafted HTML email, potentially leading to session hijacking and credential theft

[Mitigation] Immediately upgrade MDaemon Email Server to version 24.5.1c or later to resolve the sanitization flaw

[Affected Scope] CyberPanel versions through 2.3.6 and unpatched 2.3.7

[Impact] Remote attackers can bypass authentication and execute arbitrary system commands with root privileges

[Mitigation] Immediately upgrade CyberPanel to the latest secure commit (5b08cd6 or later) and restrict access to the management port