CVE Vulnerability Advisory Database

[Affected Scope] Metro Development Server started by React Native Community CLI (binding to external interfaces by default)

[Impact] Unauthenticated network attackers can send a POST request to execute arbitrary executables, and run arbitrary shell commands with controlled arguments on Windows

[Mitigation] Upgrade React Native CLI to the patched version, restrict Metro server binding to localhost (127.0.0.1), and block external access via firewalls

[Affected Scope] Oracle Fusion Middleware Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 (REST WebServices component)

[Impact] Unauthenticated remote attackers can bypass authentication via HTTP network access to achieve complete takeover of the Identity Manager system

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external access to REST API endpoints

[Affected Scope] Lanscope Endpoint Manager (On-Premises) Client program (MR) and Detection agent (DA)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending specially crafted packets to the agent

[Mitigation] Immediately apply the official security patches provided by Motex and restrict network access to the agent communication ports

[Affected Scope] Virtual servers configured with a BIG-IP APM (Access Policy Manager) access policy

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) with high privileges by sending specially crafted malicious network traffic

[Mitigation] Immediately apply the latest security patches provided by F5, and restrict access to APM virtual servers until patched

[Affected Scope] All Windows Server environments running Windows Server Update Services (WSUS).

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges over the network by sending malicious serialized payloads.

[Mitigation] Apply the official Microsoft security patches immediately, and restrict network access to WSUS ports (8530, 8531) to trusted internal networks.

[Affected Scope] Windows and Windows Server systems running the Remote Access Connection Manager (RasMan) service

[Impact] An authorized local attacker can elevate privileges to SYSTEM, gaining full administrative control over the affected host

[Mitigation] Apply the latest Microsoft cumulative security updates immediately, or disable the RasMan service as a temporary workaround

[Affected Scope] Microsoft Windows operating systems with the third-party Agere Modem driver (ltmdm64.sys) installed or natively shipped

[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, leading to full host compromise. This vulnerability is actively exploited in the wild (CISA KEV)

[Mitigation] Apply the Microsoft October cumulative update to completely remove the driver, or manually disable and restrict the driver service

[Affected Scope] All systems and services utilizing the Linux Kernel Crypto API (AF_ALG) interface.

[Impact] Internal socket state inconsistency and potential Denial of Service (DoS) due to concurrent write operations.

[Mitigation] Update to the latest stable kernel version provided by your distribution and reboot.

[Affected Scope] Oracle E-Business Suite versions 12.2.3 through 12.2.14, specifically the Oracle Configurator (Runtime UI) component.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to gain unauthorized access to critical data or compromise the entire Oracle Configurator data.

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict external HTTP/HTTPS access to the affected endpoints.

[Affected Scope] All versions of Gladinet CentreStack and Triofox prior to and including 16.7.10368.56560

[Impact] Unauthenticated remote attackers can exploit this flaw to read sensitive system and configuration files, leading to critical information disclosure

[Mitigation] Immediately upgrade to the patched version (16.7.10368.56561 or higher) and restrict external access to the management console

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-61882

[Impact] Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versi...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Virtual machines with VMware Tools installed, managed by Aria Operations with SDMP (Service Discovery Management Pack) enabled

[Impact] A malicious local actor with non-administrative privileges can exploit this vulnerability to escalate privileges to root on the same VM

[Mitigation] Immediately apply the official security updates for VMware Tools and Aria Operations as recommended by Broadcom

[Affected Scope] Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software with Remote Access VPN enabled

[Impact] Unauthenticated remote attackers can bypass authentication to access restricted VPN-related URL endpoints, and active exploit variants can trigger unexpected device reloads, causing a complete Denial of Service (DoS)

[Mitigation] Immediately upgrade to the fixed software releases recommended in the official Cisco Security Advisory

[Affected Scope] Cisco Secure Firewall ASA (Adaptive Security Appliance) and FTD (Threat Defense) software with VPN web server features enabled

[Impact] An authenticated remote attacker with valid VPN credentials can execute arbitrary code with root privileges, leading to complete compromise of the device

[Mitigation] Apply official vendor security patches immediately, enforce Multi-Factor Authentication (MFA) on all VPN accounts, and monitor HTTP traffic logs

[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services

[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185

[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)

[Affected Scope] SolarWinds Web Help Desk (WHD) versions 12.8.3 Hotfix 3 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges on the host machine by sending specially crafted serialized data

[Mitigation] Immediately upgrade to SolarWinds Web Help Desk 12.8.7 Hotfix 1 or later as recommended by the vendor advisory

[Affected Scope] Libraesva ESG versions 4.5 through 5.5.x before 5.5.7 (including versions prior to 5.0.31, 5.1.20, 5.2.31, and 5.4.8)

[Impact] Remote attackers can execute arbitrary system commands and compromise the gateway by sending a specially crafted compressed email attachment

[Mitigation] Immediately upgrade to the designated patched versions (5.5.7, 5.4.8, 5.2.31, 5.1.20, or 5.0.31) depending on your active release branch

[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known

[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules

[Affected Scope] License Servlet component of Fortra GoAnywhere MFT

[Impact] Unauthenticated attackers with a validly forged license response signature can deserialize arbitrary objects, potentially leading to remote command injection and full system compromise

[Mitigation] Immediately apply the official security patches provided by Fortra and restrict external access to the license servlet interfaces