CVE Vulnerability Advisory Database

[Affected Scope] ForgeRock Access Manager (AM) versions prior to 7.0 (including OpenAM 14.6.3 and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a single crafted HTTP request

[Mitigation] Immediately upgrade to ForgeRock AM 7.0 or later, or restrict external access to JATO-related endpoints such as /ccversion/*

[Affected Scope] SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before version 15.2.3 HF2

[Impact] Unauthenticated remote attackers can exploit this vulnerability to gain SYSTEM-level privileged access and execute arbitrary code on the host machine

[Mitigation] Immediately upgrade to Serv-U version 15.2.3 HF2 or later, and restrict external access to the service ports

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments

[Impact] Unauthenticated attackers can bypass security controls to execute arbitrary PowerShell commands with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange management ports

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with the Windows Print Spooler service enabled

[Impact] An authenticated remote attacker can execute arbitrary code with SYSTEM privileges, potentially leading to full domain compromise

[Mitigation] Apply official cumulative security updates immediately, disable the Print Spooler service where not required, and harden Point and Print registry configurations

[Affected Scope] All Windows and Windows Server operating systems with the Windows Print Spooler (spoolsv.exe) service enabled

[Impact] Authenticated local or remote attackers can execute arbitrary code with SYSTEM privileges, potentially leading to full Domain Controller compromise

[Mitigation] Apply official Microsoft security patches immediately, or disable the Print Spooler service and block remote printing via Group Policy

[Affected Scope] Checkbox Survey versions prior to 7.0, specifically affecting the CheckboxWeb.dll component

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges on the target server via untrusted data deserialization

[Mitigation] Immediately upgrade Checkbox Survey to version 7.0 or higher, and restrict external access to vulnerable endpoints

[Affected Scope] Pulse Connect Secure (PCS) versions prior to 9.1R11.4

[Impact] A remote authenticated attacker can exploit the Windows Resource Profiles feature to execute arbitrary commands with root privileges on the VPN gateway, potentially compromising the internal network

[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R11.4 or higher, apply the official XML workaround template, and perform compromise assessment

[Affected Scope] Pulse Connect Secure versions prior to 9.1R11.4

[Impact] A remote authenticated attacker can execute arbitrary code with root privileges on the target system via a maliciously crafted meeting room.

[Mitigation] Immediately upgrade Pulse Connect Secure to version 9.1R11.4 or higher, and disable unused Meeting Room features.

[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 with the default-enabled Virtual SAN Health Check plug-in

[Impact] An unauthenticated attacker with network access to port 443 can execute arbitrary commands with root privileges on the underlying operating system

[Mitigation] Apply official security patches immediately, or disable the vulnerable vSAN Health Check plug-in as a temporary workaround

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] Allows authenticated attackers to bypass file path validation and write arbitrary files, leading to Remote Code Execution (RCE) when chained with other ProxyShell vulnerabilities

[Mitigation] Apply the latest Microsoft Cumulative Updates (CU) and Security Updates (SU) immediately, and restrict external access to Exchange IIS virtual directories

[Affected Scope] HTTP.sys services running on Windows 10 versions 2004, 20H2 and Windows Server versions 2004, 20H2

[Impact] Unauthenticated remote attackers can execute arbitrary code in the kernel context or trigger an immediate Blue Screen of Death (BSOD) leading to Denial of Service (DoS) by sending specially crafted HTTP packets

[Mitigation] Apply the official Microsoft cumulative security updates immediately, and restrict external exposure of HTTP.sys-dependent services prior to patching

[Affected Scope] Tenda AC11 wireless routers running firmware versions up to and including 02.03.01.104_CN

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade to the latest patched firmware version and disable external WAN-side HTTP management interfaces

[Affected Scope] Systems running Cisco HyperFlex HX Data Platform with the web-based management interface enabled

[Impact] Unauthenticated, remote attackers can execute arbitrary system commands with root privileges on the affected device by sending crafted HTTP requests

[Mitigation] Immediately apply the official security patches provided by Cisco and restrict external access to the web management interface

[Affected Scope] Web-based management interface of Cisco HyperFlex HX Data Platform

[Impact] Unauthenticated, remote attackers can execute arbitrary OS commands with system privileges, leading to complete device compromise

[Mitigation] Apply official Cisco security patches immediately, or restrict network access to TCP ports 80/443 to trusted administrative networks

[Affected Scope] All GitLab Community Edition (CE) and Enterprise Edition (EE) versions starting from 11.9

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the GitLab user by uploading a specially crafted image file

[Mitigation] Immediately upgrade the GitLab instance to the latest patched versions (13.10.3, 13.9.6, 13.8.8, or higher)

[Affected Scope] ExifTool versions 7.44 up to 12.24, and third-party integrations such as GitLab that utilize ExifTool for metadata parsing

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by uploading a specially crafted DjVu image

[Mitigation] Immediately upgrade ExifTool to version 12.24 or higher, and update GitLab instances to 13.10.3, 13.9.6, 13.8.8, or newer

[Affected Scope] QNAP QTS (prior to 4.5.2, 4.5.1, 4.3.6, 4.3.4, 4.3.3, 4.2.6) and QuTS hero (prior to h4.5.1)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges on the compromised NAS device

[Mitigation] Immediately upgrade QNAP firmware to the patched versions and restrict external internet access to the NAS management interface

[Affected Scope] Systems running iOS versions prior to 14.4, iPadOS versions prior to 14.4, macOS Big Sur versions prior to 11.2, and Catalina/Mojave without Security Update 2021-001

[Impact] A remote attacker can execute arbitrary code on the target system, and active exploitation in the wild has been reported

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later

[Affected Scope] F5 BIG-IP versions 16.0.x, 15.1.x, 14.1.x, 13.1.x, and 12.1.x prior to patched releases

[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted URI requests, leading to TMM Denial of Service (DoS), URL-based access control bypass, or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to the designated hotfix/patched versions recommended by F5, or apply temporary traffic filtering workarounds

[Affected Scope] F5 BIG-IP (16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x) and BIG-IQ (7.1.0.x, 7.0.0.x) management interfaces running iControl REST.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges, leading to complete compromise of the target device.

[Mitigation] Immediately upgrade to the patched versions provided by F5 and restrict access to the iControl REST interface (TCP 443) from untrusted networks.