CVE Vulnerability Advisory Database

[Affected Scope] Microsoft SharePoint Server 2016, 2019, and Subscription Edition

[Impact] An authenticated attacker with high privileges (Site Owner/Administrator) can execute arbitrary code in the context of the server, leading to complete system compromise

[Mitigation] Apply the official Microsoft security patches immediately and restrict access to the SharePoint administration interface from untrusted networks

[Affected Scope] Zyxel ZyWALL/USG (4.60 to 4.73), VPN (4.60 to 5.35), USG FLEX (4.60 to 5.35), and ATP (4.60 to 5.35) series firmware

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending crafted IKE UDP packets to the affected device

[Mitigation] Immediately upgrade to the latest official patched firmware version and restrict access to IKE ports (UDP 500/4500) from untrusted WAN interfaces

[Affected Scope] Windows 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the clfs.sys driver

[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, fully compromising the host and disabling security controls

[Mitigation] Apply the Microsoft April 2023 security updates immediately, or restrict .blf file creation permissions as a temporary workaround

[Affected Scope] Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x

[Impact] Remote attackers can inject malicious Spring templates via specific web services, leading to Server-Side Template Injection (SSTI) and arbitrary code execution.

[Mitigation] Immediately upgrade affected Pentaho instances to patched versions (9.4.0.1, 9.3.0.2 or higher) and restrict external access.

[Affected Scope] Adobe ColdFusion 2018 Update 15 (and earlier) and ColdFusion 2021 Update 5 (and earlier).

[Impact] Successful exploitation allows unauthenticated remote attackers to execute arbitrary code in the context of the current user without any user interaction.

[Mitigation] Immediately apply the official Adobe security patches to upgrade to ColdFusion 2018 Update 16, ColdFusion 2021 Update 6, or later.

[Affected Scope] D-Link DIR-820L router with firmware version DIR820LA1_FW105B03 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted HTTP request

[Mitigation] Since this product is End-of-Life (EOL), immediate hardware replacement is highly recommended; otherwise, disable remote management and restrict access

[Affected Scope] Fortinet FortiOS versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.9, and prior to 6.4.11

[Impact] A privileged attacker can read and write arbitrary files on the underlying Linux system via crafted CLI commands, potentially leading to firmware tampering and persistent backdoor installation

[Mitigation] Immediately upgrade to the official patched versions (7.2.4, 7.0.10, 6.4.11 or higher)

[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2016, 2019, 2022 utilizing the CLFS driver

[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft cumulative security updates (February 2023 Patch Tuesday) and monitor unpatched assets

[Affected Scope] Microsoft Office and Microsoft Publisher 2013, 2016, 2019, 2021, and Microsoft 365 Apps

[Impact] Attackers can bypass Office macro blocking policies (Mark of the Web) via specially crafted Publisher files to execute arbitrary code

[Mitigation] Apply official Microsoft security patches immediately and enforce registry policies to disable Publisher macros

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] An authenticated attacker can execute arbitrary commands with SYSTEM privileges and fully compromise the server by sending specially crafted serialized data

[Mitigation] Immediately apply the latest Cumulative Updates (CU) and Security Updates (SU) provided by Microsoft

[Affected Scope] TerraMaster NAS devices running TOS (TerraMaster Operating System) version 4.2.29 and earlier

[Impact] Unauthenticated remote attackers can retrieve the administrator password hash or plaintext by sending a crafted HTTP request, leading to complete device compromise

[Mitigation] Immediately upgrade TOS to the latest secure version (4.2.30 or higher) and restrict external internet access to the NAS management interface

[Affected Scope] Fortra (formerly HelpSystems) GoAnywhere MFT versions prior to 7.1.2

[Impact] An unauthenticated remote attacker can execute arbitrary system commands on the target server by sending a malicious serialized object to the License Response Servlet.

[Mitigation] Immediately upgrade GoAnywhere MFT to version 7.1.2 or higher, and restrict external access to the administrator console port (9006).

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can compromise the server via T3/IIOP protocols, leading to unauthorized access to sensitive data or potential Remote Code Execution (RCE)

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to T3/IIOP protocols (typically port 7001)

[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the ALPC mechanism

[Impact] Successful exploitation allows a local attacker to bypass sandbox environments, elevate privileges to SYSTEM, and execute arbitrary code to fully compromise the host

[Mitigation] Immediately apply the official Microsoft cumulative security updates released in January 2023 or later

[Affected Scope] Citrix ADC and Citrix Gateway versions 12.1 and 13.0 with SAML SP or IdP configuration enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code on the target appliance and gain full system control by sending specially crafted requests

[Mitigation] Immediately upgrade to the patched firmware versions (12.1-65.25, 13.0-88.16, or higher) provided by Citrix

[Affected Scope] Mitel MiVoice Connect 19.3 (version 22.22.6100.0 and prior)

[Impact] Authenticated attackers can execute arbitrary code via crafted database inputs, potentially leading to full system compromise

[Mitigation] Apply the official security patches provided in Mitel Advisory 22-0008 immediately and restrict database access

[Affected Scope] Windows systems running Audinate Dante Discovery services and utilizing the mDNSResponder.exe component

[Impact] Local attackers can leverage the legitimate, signed executable to load malicious DLLs, leading to arbitrary code execution with elevated privileges

[Mitigation] Apply official security patches from Audinate, restrict write permissions on the mDNSResponder execution directory, and monitor for unauthorized DLL loads

[Affected Scope] Windows client and server environments utilizing the Windows Scripting Engine (JScript9)

[Impact] Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the active user via crafted web content or documents

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict the execution of legacy JScript engines

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Print Spooler service enabled

[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing server infrastructures

[Affected Scope] FortiOS (7.2.0 to 7.2.1, 7.0.0 to 7.0.6), FortiProxy (7.2.0, 7.0.0 to 7.0.6), FortiSwitchManager (7.2.0, 7.0.0)

[Impact] An unauthenticated remote attacker can bypass authentication via specially crafted HTTP/HTTPS requests, gaining full administrative access to perform arbitrary operations

[Mitigation] Immediately upgrade to patched versions (FortiOS 7.2.2 / 7.0.7 or higher) or disable HTTP/HTTPS administrative access from untrusted networks