CVE Vulnerability Advisory Database

[Affected Scope] Ivanti MobileIron Sentry versions 9.18.0 and below with MICS (Mobile IT Connector System) Admin Portal enabled

[Impact] Unauthenticated attackers can bypass authentication controls on the administrative interface, leading to remote code execution (RCE) and full system compromise

[Mitigation] Immediately apply the official vendor patches and restrict external access to the MICS administrative port (default TCP 8443)

[Affected Scope] Juniper Networks Junos OS on EX Series switches and SRX Series firewalls with the J-Web interface enabled

[Impact] An unauthenticated, network-based attacker can modify the PHP execution environment (PHPRC) via crafted HTTP requests, leading to arbitrary code execution and full device compromise

[Mitigation] Immediately upgrade Junos OS to the patched versions, or disable the J-Web interface and restrict access to trusted IP addresses as a temporary workaround

[Affected Scope] Ivanti EPMM versions 11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2, and 11.8.x < 11.8.1.2

[Impact] An authenticated administrator can write arbitrary files to the appliance via path traversal, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to the admin portal

[Affected Scope] Apple iOS before 16.6, iPadOS before 16.6, macOS Ventura before 13.5, Safari before 16.5.2, tvOS before 16.6, and watchOS before 9.6

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) within the sandbox context, and this vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating systems and Safari browser

[Affected Scope] Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier), and 2023u1 (and earlier)

[Impact] Unauthenticated remote attackers can exploit a Deserialization of Untrusted Data vulnerability (CWE-502) to execute arbitrary code with system privileges

[Mitigation] Immediately apply the official Adobe security patches (APSB23-41), restrict external access, and enable WAF rules

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a SAML SP or SAML IdP

[Impact] Unauthenticated remote attackers can execute arbitrary code with elevated privileges on the appliance, leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by Citrix and run compromise assessment scripts to detect potential Indicators of Compromise (IoCs)

[Affected Scope] Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier), and 2023.0.0.330468 (and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending malicious serialized data

[Mitigation] Immediately apply the official Adobe security patch (APSB23-40) and restrict external access to serialization endpoints

[Affected Scope] All endpoint systems running Microsoft Windows and Microsoft Office suites

[Impact] Remote attackers can execute arbitrary code with system privileges via specially crafted documents, leading to full system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement the registry-based workaround

[Affected Scope] Zimbra Collaboration Suite (ZCS) version 8.8.15

[Impact] A remote authenticated attacker can execute arbitrary code and hijack sessions by injecting malicious scripts into the '/h/autoSaveDraft' function

[Mitigation] Immediately apply the official Zimbra security patches and restrict access to the affected endpoint using WAF rules

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] iOS/iPadOS 15 and 16, macOS Ventura, watchOS, tvOS, and Safari versions prior to 16.5

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE), and Apple is aware of active exploitation in the wild

[Mitigation] Immediately update operating systems and Safari to the latest patched versions using Apple's official software update mechanism

[Affected Scope] PaperCut NG and MF systems with an active administrator login session.

[Impact] Attackers can trick administrators into clicking malicious links, leading to unauthorized security setting modifications and arbitrary code execution.

[Mitigation] Apply the official vendor security patches immediately and restrict external access to the admin interface.

[Affected Scope] Zyxel NAS326 (prior to V5.21(AAZF.14)C0), NAS540 (prior to V5.21(AATB.11)C0), and NAS542 (prior to V5.21(ABAG.11)C0)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP requests, leading to complete system compromise

[Mitigation] Apply the official firmware updates immediately and restrict external internet access to the NAS management interface

[Affected Scope] FortiOS versions 7.2.4 and below, 7.0.11 and below, 6.4.12 and below, 6.0.16 and below; FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below, and all 1.2/1.1 versions with SSL-VPN enabled

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target appliance via specifically crafted HTTP requests

[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] VMware Aria Operations for Networks (formerly vRealize Network Insight) 6.x versions

[Impact] Unauthenticated remote attackers with network access can execute arbitrary commands with root privileges, leading to complete system compromise

[Mitigation] Apply the official VMware security patches (VMSA-2023-0012) immediately and restrict access to management interfaces

[Affected Scope] TP-Link TL-WR940N (V2/V4), TL-WR841N (V8/V10), and TL-WR740N (V1/V2) routers

[Impact] Authenticated attackers can execute arbitrary system commands and gain full control of the device via a vulnerable web component

[Mitigation] Apply the latest firmware updates immediately, disable remote WAN management, and change default administrator credentials

[Affected Scope] All MOVEit Transfer versions prior to 2021.0.6, 2021.1.4, 2022.0.4, 2022.1.5, and 2023.0.1, including older unsupported versions

[Impact] Unauthenticated remote attackers can manipulate the database via HTTP/HTTPS requests, potentially leading to remote code execution (RCE) and unauthorized data exfiltration

[Mitigation] Immediately upgrade to the patched versions, restrict external HTTP/HTTPS access to the server, and conduct a thorough compromise assessment

[Affected Scope] All Openfire versions from 3.10.0 (released in April 2015) up to 4.6.7 and 4.7.4

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal, gain administrative access, and potentially execute arbitrary code (RCE) by uploading malicious plugins

[Mitigation] Immediately upgrade to patched versions of Openfire (4.6.8, 4.7.5, or 4.8.0+) or apply strict access control and WAF rules to block path traversal patterns

[Affected Scope] Barracuda Email Security Gateway (appliance form factor only) versions 5.1.3.001 through 9.2.0.006

[Impact] A remote attacker can execute arbitrary system commands with the privileges of the ESG product by sending a specially crafted .tar archive, leading to complete system compromise

[Mitigation] Verify the automatic application of patch BNSF-36456, perform a thorough compromise assessment (IoC search), and immediately replace compromised appliances

[Affected Scope] Apache RocketMQ versions 5.1.0 and below, and versions 4.9.5 and below

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the RocketMQ process, leading to full system compromise

[Mitigation] Immediately upgrade to RocketMQ version 5.1.1 or above (for 5.x) or 4.9.6 or above (for 4.x)