CVE Vulnerability Advisory Database

[Affected Scope] Exim mail server versions 4.87 to 4.91 inclusive

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted recipient addresses

[Mitigation] Immediately upgrade Exim packages to a patched version (4.92 or higher) and apply temporary configuration workarounds

[Affected Scope] FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8, 5.4.1 to 5.4.10, and FortiProxy 1.0/1.1/1.2/2.0 series

[Impact] An unauthenticated remote attacker can modify the password of any SSL VPN web portal user via specially crafted HTTP requests, leading to unauthorized network access

[Mitigation] Immediately upgrade the firmware to the patched versions, or restrict/disable the SSL VPN web portal service as a temporary workaround

[Affected Scope] Schneider Electric U.motion Builder software version 1.3.4

[Impact] Unauthenticated remote attackers can execute arbitrary code with elevated privileges by injecting malicious SQL commands into vulnerable input fields

[Mitigation] Immediately upgrade to the patched version provided by the vendor, or restrict network access to the device from the public internet

[Affected Scope] Pulse Connect Secure (PCS) versions prior to 8.2R12.1, 8.3R7.1, and 9.0R3.4

[Impact] An unauthenticated remote attacker can send a specially crafted URI to read arbitrary system files and session databases, potentially leading to complete credential theft and network compromise.

[Mitigation] Immediately upgrade to the official patched firmware versions (8.2R12.1, 8.3R7.1, 9.0R3.4, or later).

[Affected Scope] Sierra Wireless AirLink ES450 firmware version 4.9.3 and its ACEManager web interface

[Impact] An authenticated attacker can upload arbitrary executable files via a crafted HTTP POST request, leading to remote code execution with system privileges

[Mitigation] Apply the latest official firmware security patches and restrict external internet access to the ACEManager interface

[Affected Scope] Kentico CMS versions 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and all 9.x versions

[Impact] Unauthenticated remote attackers can bypass authentication and execute arbitrary .NET object deserialization, leading to full remote code execution on the host server

[Mitigation] Immediately apply the official vendor hotfixes or restrict external network access to the Kentico Staging Service endpoints

[Affected Scope] Microsoft Internet Explorer 11 running on various Windows operating system environments

[Impact] An attacker can remotely test and verify the presence of specific files on the local disk, gathering critical intelligence for multi-stage targeted attacks

[Mitigation] Apply the official Microsoft cumulative security updates or disable Internet Explorer in favor of modern secure browsers

[Affected Scope] Microsoft SharePoint Server 2010, 2013, 2016, 2019, and SharePoint Foundation 2013

[Impact] Unauthenticated remote attackers can execute arbitrary code with the privileges of the SharePoint IIS application pool (w3wp.exe) by sending a specially crafted application package, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft security updates and perform compromise assessments on internet-facing SharePoint servers

[Affected Scope] Broad range of Microsoft Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019

[Impact] A local attacker with low privileges can execute a specially crafted application to elevate privileges to SYSTEM, leading to complete compromise of the host

[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict local user privileges

[Affected Scope] Windows 8.1, 10, Windows Server 2012 R2, 2016, and Windows RT 8.1

[Impact] A local attacker can execute arbitrary code in kernel mode, completely compromising the system and gaining SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict unauthorized local access

[Affected Scope] Laravel Framework versions up to 5.5.40 and 5.6.x versions up to 5.6.29

[Impact] If an attacker obtains or compromises the application key (APP_KEY), they can execute arbitrary remote code (RCE) on the target server by sending a crafted X-XSRF-TOKEN header

[Mitigation] Immediately upgrade the Laravel Framework to the patched versions (5.5.41, 5.6.30, or higher) and rotate the APP_KEY if it has been exposed

[Affected Scope] Quest KACE System Management Appliance (SMA) 8.0.318 and prior versions

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with high privileges by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately and restrict external internet access to the management interface

[Affected Scope] Adobe ColdFusion 2016 Update 5 and earlier, ColdFusion 11 Update 13 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting a deserialization of untrusted data (CWE-502)

[Mitigation] Immediately apply the official Adobe security patch (APSB18-14) and restrict external access to RMI and management ports

[Affected Scope] Drupal versions prior to 7.58, 8.3.9, 8.4.6, and 8.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system-level control of the web server by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Drupal Core to the patched versions (7.58, 8.3.9, 8.4.6, 8.5.1 or higher)

[Affected Scope] Cisco devices running Cisco IOS Software Releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later with Login Enhancements (Login Block) enabled

[Impact] An unauthenticated, remote attacker can trigger an unexpected system reload, leading to a persistent Denial of Service (DoS) condition

[Mitigation] Upgrade to the latest patched Cisco IOS software release or temporarily disable/modify the Login Block configuration

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.7 Patch 1 and 8.8.x versions prior to 8.8.7

[Impact] Remote attackers can execute arbitrary web script or HTML in the victim's browser context via a manipulated Content-Location header in an email attachment, leading to session hijacking and account takeover

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to the latest patched version (8.7 Patch 1, 8.8.7, or later)

[Affected Scope] PAN-OS versions before 6.1.19, 7.0.19, 7.1.14, and 8.0.6 management interface

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the management interface, leading to complete device compromise

[Mitigation] Immediately upgrade to the patched versions and restrict access to the management interface from the public internet

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, and 12.2.1.2.0

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the WebLogic Server via crafted XML payloads sent over HTTP/T3

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or disable the vulnerable 'wls-wsat' component and restrict T3 protocol access

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46, and 7.0.0 to 7.0.81 when the 'readonly' parameter of the DefaultServlet is set to false

[Impact] Unauthenticated remote attackers can upload malicious JSP files using crafted HTTP PUT requests, leading to arbitrary code execution with the privileges of the Tomcat process

[Mitigation] Upgrade Apache Tomcat to the latest secure versions, or modify the web.xml configuration to ensure the 'readonly' parameter is set to true (default)

[Affected Scope] Symantec Messaging Gateway (SMG) versions prior to 10.6.3-267

[Impact] Authenticated attackers can execute arbitrary commands remotely on the target system and subsequently elevate privileges to root, leading to complete system compromise

[Mitigation] Immediately upgrade Symantec Messaging Gateway to version 10.6.3-267 or later