CVE Vulnerability Advisory Database

[Affected Scope] Apple iPhone and iPad devices running iOS/iPadOS versions prior to 15.8.4, 16.7.11, 17.7.5, or 18.3.1

[Impact] A physical attacker can disable USB Restricted Mode on a locked device, potentially allowing unauthorized data extraction and forensic access

[Mitigation] Immediately update all affected devices to iOS/iPadOS 15.8.4, 16.7.11, 17.7.5, 18.3.1 or later

[Affected Scope] Trimble Cityworks versions prior to 15.8.9 and Cityworks with Office Companion versions prior to 23.10

[Impact] Authenticated attackers can exploit a deserialization vulnerability (CWE-502) to execute arbitrary code with system privileges on the Microsoft IIS web server

[Mitigation] Immediately upgrade to patched versions (Cityworks 15.8.9+ or Office Companion 23.10+) and restrict IIS access controls

[Affected Scope] Legacy and End-of-Life (EOL) Zyxel VMG4325-B10A DSL CPE devices running firmware version 1.00(AAFR.4)C0_20170615.

[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with root privileges via the Telnet management interface.

[Mitigation] Since the device is unsupported (EOL), immediate replacement of the hardware is highly recommended. Temporarily disable external Telnet access and enforce strong credentials.

[Affected Scope] Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 and prior

[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with system privileges by sending a crafted HTTP POST request to the CGI program

[Mitigation] Since this is an end-of-life (EOL) legacy device, immediate hardware replacement or strict access control restricting WAN-side management access is highly recommended

[Affected Scope] Digiever DS-2105 Pro devices running firmware version 3.1.0.71-11 and prior (including End-of-Life products)

[Impact] Authenticated attackers can execute arbitrary OS commands with root privileges via the vulnerable CGI script

[Mitigation] Immediately isolate affected devices from the public internet and restrict access using firewalls or WAF rules

[Affected Scope] Advantive VeraCore through version 2025.1.0 affecting the timeoutWarning.asp component

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via the PmSess1 parameter, leading to unauthorized data exposure

[Mitigation] Apply the official vendor security patch immediately, or implement WAF rules to block malicious payloads targeting the affected parameter

[Affected Scope] Advantive VeraCore solutions prior to version 2024.4.2.1

[Impact] Remote authenticated attackers can upload malicious files to unintended web-accessible directories via upload.aspx, leading to arbitrary code execution

[Mitigation] Immediately upgrade VeraCore to version 2024.4.2.1 or later, and restrict execution permissions on upload directories

[Affected Scope] Apple operating systems prior to iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, and other legacy versions

[Impact] A malicious application can exploit a Use-After-Free vulnerability to elevate privileges to system/kernel level and execute arbitrary code

[Mitigation] Immediately upgrade all affected Apple devices to the latest patched versions (iOS 18.3, macOS 15.3, etc.) via official software update channels

[Affected Scope] All unpatched installations of 7-Zip software

[Impact] When extracting files from a crafted archive, the Mark-of-the-Web (MotW) is not propagated, allowing arbitrary code execution under the current user context without security warnings

[Mitigation] Immediately upgrade 7-Zip to the latest patched version and monitor unpatched endpoint assets

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)

[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles

[Affected Scope] Craft CMS 4.x (prior to 4.13.8) and 5.x (prior to 5.5.8) installations where the security key has been compromised

[Impact] Attackers can leverage the compromised security key to forge serialized payloads, leading to arbitrary Remote Code Execution (RCE) on the host server

[Mitigation] Immediately upgrade Craft CMS to version 4.13.8 or 5.5.8 (or higher) and rotate the CRAFT_SECURITY_KEY

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.

[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.

[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior

[Impact] Unauthenticated remote attackers can download arbitrary sensitive files, including server configuration files, secrets, and hashed user credentials, via crafted HTTP requests

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and restrict external access to the console until patched

[Affected Scope] SimpleHelp remote support software v5.5.7 and earlier versions

[Impact] Low-privilege technician accounts can generate API keys with excessive permissions, leading to full server administrator privilege escalation

[Mitigation] Immediately upgrade to SimpleHelp v5.5.8 or later, and audit all existing API keys for unauthorized creation

[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments

[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts

[Affected Scope] Windows 10, 11, and Windows Server systems with the Hyper-V virtualization role enabled

[Impact] Local attackers can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with kernel-level (SYSTEM) privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Cumulative Security Updates and disable unnecessary Hyper-V services

[Affected Scope] Windows Server and Desktop operating systems with the Windows Hyper-V virtualization role enabled

[Impact] A local attacker can exploit a heap-based buffer overflow (CWE-122) to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Apply the official Microsoft security patches immediately, or temporarily disable non-essential Hyper-V services to reduce the attack surface

[Affected Scope] Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update

[Impact] Remote unauthenticated attackers can exploit absolute path traversal to leak highly sensitive system information

[Mitigation] Immediately apply the official Ivanti security updates and restrict access to the EPM management interfaces

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-13160

[Impact] Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Ivanti EPM 2024 prior to the January 2025 Security Update, and EPM 2022 SU6 prior to the January 2025 Security Update

[Impact] A remote unauthenticated attacker can exploit an absolute path traversal vulnerability to leak highly sensitive system information and credentials

[Mitigation] Immediately apply the official Ivanti January 2025 Security Update and restrict access to the EPM management console