CVE Vulnerability Advisory Database

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior

[Impact] Authenticated attackers can execute arbitrary code with elevated privileges via crafted API requests, potentially leading to full system compromise.

[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict external access to the API endpoints.

[Affected Scope] Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior

[Impact] Unauthenticated remote attackers can bypass authentication via the API component to access protected resources and sensitive data without credentials

[Mitigation] Immediately apply the official vendor security patches and restrict external access to the API endpoints

[Affected Scope] Multiple Fortinet appliance product lines including FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with root privileges by sending crafted HTTP requests containing a malicious hash cookie

[Mitigation] Immediately upgrade to the patched firmware versions provided by the vendor and restrict external access to management interfaces

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1052

[Impact] Unauthenticated remote attackers can exploit path traversal to write arbitrary files with system authority, leading to Remote Code Execution (RCE)

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1052 or later and restrict external access

[Affected Scope] Systems utilizing the SAP NetWeaver Visual Composer Metadata Uploader module

[Impact] A privileged attacker can upload untrusted or malicious content, triggering deserialization of untrusted data (CWE-502) and potentially compromising the confidentiality, integrity, and availability of the host system

[Mitigation] Immediately apply the official security patch (SAP Note 3604119) and restrict access to unauthorized metadata upload endpoints

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-47729

[Impact] The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which i...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Craft CMS versions prior to 4.15.3 and 5.7.5

[Impact] Unauthenticated attackers can inject arbitrary PHP code into session files, potentially leading to Remote Code Execution (RCE) when chained with an independent local file inclusion vulnerability.

[Mitigation] Immediately upgrade Craft CMS to the patched versions (4.15.3, 5.7.5, or higher).

[Affected Scope] SysAid On-Prem versions <= 23.3.40

[Impact] Unauthenticated remote attackers can exploit the Server URL processing logic to read arbitrary files, hijack administrator accounts, and potentially achieve Remote Code Execution (RCE)

[Mitigation] Immediately upgrade SysAid On-Prem to the patched version (24.40.60 or higher) and restrict external access to the application

[Affected Scope] SysAid On-Prem versions 23.3.40 and below

[Impact] Unauthenticated remote attackers can read arbitrary system files and perform administrator account takeover, leading to full system compromise.

[Mitigation] Immediately upgrade SysAid On-Prem to version 24.4.60 or higher, and restrict external access to the Checkin endpoint prior to patching.

[Affected Scope] Output Messenger versions prior to 2.0.63

[Impact] Authenticated attackers can leverage directory traversal sequences ('../') to access sensitive configuration files and arbitrary system files, potentially leading to remote code execution (RCE)

[Mitigation] Immediately upgrade Output Messenger to the latest secure version (2.0.63 or higher) and restrict network access

[Affected Scope] ConnectWise ScreenConnect versions 25.2.3 and earlier

[Impact] If machine keys are compromised by an attacker with privileged system-level access, they can inject a malicious ViewState to execute arbitrary code on the server

[Mitigation] Immediately upgrade to ScreenConnect 2025.4, which completely disables ViewState and removes its dependency

[Affected Scope] Commvault Web Server versions prior to 11.36.46, 11.32.89, 11.28.141, and 11.20.217 on Windows and Linux platforms

[Impact] An authenticated remote attacker can compromise the web server by creating and executing malicious webshells, leading to full system takeover.

[Mitigation] Immediately upgrade Commvault Web Server to the patched versions (11.36.46, 11.32.89, 11.28.141, or 11.20.217 or higher).

[Affected Scope] Craft CMS versions 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server via crafted HTTP requests, leading to complete system compromise.

[Mitigation] Immediately upgrade your Craft CMS installation to the patched versions (3.9.15, 4.14.15, or 5.6.17) depending on your major version branch.

[Affected Scope] SAP systems utilizing the SAP NetWeaver Visual Composer Metadata Uploader component.

[Impact] Unauthenticated remote attackers can upload malicious executable binaries (such as web shells), leading to complete compromise of system confidentiality, integrity, and availability.

[Mitigation] Immediately apply the official security patch (SAP Note 3594142) and restrict external access to the Metadata Uploader endpoints.

[Affected Scope] Brocade Fabric OS (FOS) versions 9.1.0 through 9.1.1d6 running on Fibre Channel switch hardware

[Impact] A local attacker with administrative privileges can bypass shell restrictions to execute arbitrary code with full root privileges, leading to complete system compromise

[Mitigation] Immediately upgrade Brocade Fabric OS to a patched release (9.1.1d7 or later, or 9.2.x branches) and restrict administrative access

[Affected Scope] Commvault Command Center Innovation Release versions 11.38.0 through 11.38.20.

[Impact] Unauthenticated remote attackers can upload malicious ZIP installation packages to execute arbitrary code (RCE) via path traversal and JSP web shell deployment.

[Mitigation] Immediately upgrade to patched versions: 11.38.20 with SP38-CU20-433/436 or 11.38.25 with SP38-CU25-434/438 or higher.

[Affected Scope] All mail server environments running Qualitia Active! mail 6 BuildInfo: 6.60.05008561 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code or trigger a Denial-of-Service (DoS) condition by sending specially crafted HTTP requests

[Mitigation] Immediately apply the latest security patch provided by the vendor (Qualitia) and restrict external access to the webmail interface until patched

[Affected Scope] Erlang/OTP versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20

[Impact] Unauthenticated remote attackers can exploit a flaw in SSH protocol message handling to execute arbitrary commands and gain full system control without valid credentials

[Mitigation] Immediately upgrade Erlang/OTP to patched versions (OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20) or temporarily disable the SSH server and restrict access via firewall rules

[Affected Scope] Apple devices running iOS < 18.4.1, iPadOS < 18.4.1, macOS Sequoia < 15.4.1, tvOS < 18.4.1, and visionOS < 2.4.1

[Impact] Attackers with arbitrary read/write capabilities can bypass hardware-level Pointer Authentication (PAC) to execute arbitrary code with kernel privileges

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.4.1, macOS 15.4.1, etc.)

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability