CVE Vulnerability Advisory Database

[Affected Scope] Unpatched installations of .NET Framework, Microsoft SharePoint Server, and Visual Studio

[Impact] Remote attackers can execute arbitrary code (RCE) with high privileges by sending a specially crafted XML payload to vulnerable endpoints

[Mitigation] Apply the official Microsoft security updates immediately and restrict untrusted XML deserialization using DataSet/DataTable

[Affected Scope] Windows Server host and guest virtual machine (VM) environments with Hyper-V RemoteFX vGPU enabled

[Impact] An authenticated attacker on a guest OS can bypass VM isolation boundaries to execute arbitrary code on the host OS, leading to full host compromise

[Mitigation] Apply official Microsoft security patches immediately, or disable the deprecated and high-risk RemoteFX vGPU feature in favor of Discrete Device Assignment (DDA)

[Affected Scope] SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30, 7.31, 7.40, and 7.50

[Impact] Unauthenticated remote attackers can execute configuration tasks, create administrative accounts, and fully compromise system confidentiality, integrity, and availability

[Mitigation] Apply SAP Security Note 2934135 immediately or disable/restrict access to the CTC Web Service

[Affected Scope] D-Link DIR-610 devices (End-of-Life / Unsupported products)

[Impact] An authenticated attacker can execute arbitrary system commands with root privileges via the 'cmd' parameter to 'command.php', leading to full device compromise.

[Mitigation] Since this product is End-of-Life (EOL), no official patches are available. Immediate device replacement or strict access control is highly recommended.

[Affected Scope] MobileIron Core & Connector versions 10.6.0.0 and earlier, Sentry versions 9.8.0 and earlier, Monitor & RDB versions 2.0.0.1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system administrator privileges by sending specially crafted Hessian serialized data

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict external access to sensitive service endpoints

[Affected Scope] Traffic Management User Interface (TMUI), also known as the Configuration utility, in F5 BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files or execute remote commands with administrative privileges, leading to complete system compromise

[Mitigation] Immediately upgrade to the patched versions provided by F5, or apply temporary workarounds to restrict external access to the TMUI management interface

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] Pi-hole Web v4.3.2 (AdminLTE) and prior versions

[Impact] A privileged dashboard user can execute arbitrary system commands on the underlying operating system via a crafted DHCP static lease input.

[Mitigation] Immediately upgrade Pi-hole AdminLTE to version v4.3.3 or later, and restrict access to the admin dashboard.

[Affected Scope] Apache Kylin versions 2.3.0 through 2.6.5, and version 3.0.1

[Impact] Authenticated attackers can exploit the lack of input validation to execute arbitrary OS commands and gain full control over the hosting server

[Mitigation] Immediately upgrade to Apache Kylin 2.6.6, 3.0.2, or later, or apply configuration workarounds to disable vulnerable features

[Affected Scope] IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4.

[Impact] A remote authenticated attacker with high privileges could execute arbitrary OS commands, leading to complete system compromise.

[Mitigation] Apply the official IBM security patches immediately and restrict network access to the management interface.

[Affected Scope] Roundcube Webmail versions before 1.4.4

[Impact] Unauthenticated attackers can execute arbitrary OS commands and gain full control of the mail server via shell metacharacters

[Mitigation] Immediately upgrade Roundcube Webmail to version 1.4.4 or later and restrict ImageMagick configuration paths

[Affected Scope] Juniper Networks Junos OS devices with HTTP/HTTPS services (J-Web, Web Authentication, Dynamic-VPN, etc.) enabled

[Impact] Unauthenticated attackers can read arbitrary system files, hijack active administrator session tokens, or inject commands into web logs to execute limited commands

[Mitigation] Upgrade Junos OS to the recommended patched release, or disable HTTP/HTTPS and J-Web services if they are not business-critical

[Affected Scope] SaltStack Salt versions before 2019.2.4 and 3000 before 3000.2

[Impact] Unauthenticated remote attackers can bypass authentication via the ClearFuncs class to retrieve master tokens or execute arbitrary commands on connected salt minions

[Mitigation] Immediately upgrade SaltStack to patched versions (2019.2.4, 3000.2, or higher) and restrict access to salt-master ports (4505, 4506)

[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition

[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs

[Affected Scope] Windows client operating systems prior to Windows 10, and Windows Server editions

[Impact] Remote code execution with kernel-level privileges via a specially crafted Adobe Type 1 PostScript font file

[Mitigation] Apply official Microsoft security updates immediately, or implement workarounds including disabling ATMFD.dll and stopping the WebClient service

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and take full control of the Oracle WebLogic Server by sending malicious serialized data via T3 or IIOP protocols

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict external access to T3/IIOP protocols using connection filters and firewalls

[Affected Scope] Amcrest and Dahua IP cameras and NVR devices with TCP port 37777 enabled

[Impact] Authenticated remote attackers can exploit this vulnerability to crash the device (DoS) or potentially execute arbitrary code (RCE)

[Mitigation] Apply the latest firmware updates immediately and restrict access to TCP port 37777 using firewalls

[Affected Scope] Sonatype Nexus Repository Manager versions prior to 3.21.2

[Impact] An authenticated attacker with low privileges can execute arbitrary system commands on the server by sending a specially crafted request.

[Mitigation] Immediately upgrade Nexus Repository Manager to the latest stable version (3.21.2 or higher).

[Affected Scope] Liferay Portal versions prior to 7.2.1 CE GA2

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting the JSON web services (JSONWS) API to deserialize untrusted Java objects

[Mitigation] Immediately upgrade Liferay Portal to version 7.2.1 CE GA2 or later, and restrict external access to the JSONWS API endpoints

[Affected Scope] Trend Micro Apex One (2019), OfficeScan XG, and Worry-Free Business Security (9.0, 9.5, 10.0) agents

[Impact] Authenticated attackers can bypass content validation to manipulate agent client components, potentially leading to arbitrary code execution

[Mitigation] Apply official critical patches and hotfixes immediately and enforce automatic agent updates via the management console