CVE Vulnerability Advisory Database

[Affected Scope] Trend Micro Apex One (2019) and OfficeScan XG server environments.

[Impact] An authenticated remote attacker can exploit the migration tool component to execute arbitrary code (RCE) with system privileges on the affected server.

[Mitigation] Immediately apply the official Critical Patch provided by Trend Micro and restrict access to migration-related ports.

[Affected Scope] Unraid OS version 6.8.0

[Impact] Remote attackers can bypass authentication to gain administrative access and execute arbitrary code with root privileges on the target system.

[Mitigation] Immediately upgrade Unraid OS to the latest stable version (6.8.1 or higher) and restrict external access to the management interface.

[Affected Scope] Unraid OS versions 6.8.0 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary commands with root privileges, leading to complete system compromise.

[Mitigation] Immediately upgrade Unraid OS to a secure version (6.8.1 or later) and restrict external access to the management web interface.

[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol

[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks

[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445

[Affected Scope] All SMDAgents connected to SAP Solution Manager (User Experience Monitoring) version 7.2

[Impact] Unauthenticated attackers can compromise all connected SMDAgents and execute arbitrary remote commands with high privileges

[Mitigation] Immediately apply the official SAP security patch (SAP Note 2890213) and restrict network access to the Solution Manager ports

[Affected Scope] D-Link DCS-930L network camera devices running firmware versions prior to 2.12.

[Impact] An authenticated remote attacker with administrative privileges can execute arbitrary OS commands via the 'SystemCommand' parameter in the 'setSystemCommand' API, leading to complete device compromise.

[Mitigation] Immediately upgrade the device firmware to version 2.12 or higher, and restrict external access to the camera's management interface.

[Affected Scope] rConfig network configuration management servers running version 3.94 and prior

[Impact] Authenticated attackers can execute arbitrary OS commands with web server privileges by injecting shell metacharacters into the fileName parameter, leading to full system compromise

[Mitigation] Upgrade to the latest secure version of rConfig, restrict access to the vulnerable PHP script, and implement strict input validation

[Affected Scope] Zoho ManageEngine Desktop Central versions prior to 10.0.474

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending specially crafted serialized Java objects

[Mitigation] Immediately upgrade to version 10.0.474 or higher, and restrict external access to the management ports

[Affected Scope] ZyXEL NAS devices (NAS326, NAS520, NAS540, NAS542) running firmware versions prior to 5.21, and all end-of-support NSA series models

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP request

[Mitigation] Immediately upgrade active models to the patched firmware versions, and isolate or replace end-of-support (EoL) models from the network

[Affected Scope] Firefox < 72.0.1, Firefox ESR < 68.4.1, and Thunderbird < 68.4.1

[Impact] Exploitation of the type confusion flaw in the IonMonkey JIT compiler allows remote attackers to execute arbitrary code and compromise the host system via a crafted malicious webpage

[Mitigation] Immediately update all affected installations to Firefox 72.0.1, Firefox ESR 68.4.1, Thunderbird 68.4.1, or later

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50, and 7.0.0 to 7.0.99

[Impact] Attackers with access to the AJP port (default 8009) can read arbitrary files from the web application or execute arbitrary code (RCE) if file upload is permitted

[Mitigation] Upgrade to Apache Tomcat 9.0.31, 8.5.51, 7.0.100 or later, or disable/restrict the AJP Connector in the configuration

[Affected Scope] Microsoft Exchange Server 2010, 2013, 2016, and 2019

[Impact] An authenticated attacker can exploit static cryptographic keys to forge ASP.NET ViewState data, leading to arbitrary code execution with SYSTEM privileges via the Exchange Control Panel (ECP)

[Mitigation] Apply the official Microsoft Cumulative Update (CU) and security patches immediately, and regenerate unique ViewState validation/decryption keys

[Affected Scope] Microsoft SQL Server Reporting Services (SSRS) 2012, 2014, and 2016

[Impact] An authenticated attacker can execute arbitrary remote code under the context of the SSRS service account by sending a crafted HTTP POST request

[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to the SSRS web portal

[Affected Scope] Netis WF2419 router firmware versions V1.2.31805 and V2.2.36123.

[Impact] Authenticated attackers can execute arbitrary system commands with root privileges via the tracert diagnostic tool, leading to complete device compromise.

[Mitigation] Apply the latest secure firmware update, disable remote WAN management access, and enforce strong administrator credentials.

[Affected Scope] All PlaySMS installations running versions prior to 1.4.3

[Impact] Unauthenticated remote attackers can inject malicious template payloads to execute arbitrary operating system commands, leading to full system compromise

[Mitigation] Immediately upgrade to PlaySMS version 1.4.3 or higher, restrict external access, and deploy Web Application Firewall (WAF) rules

[Affected Scope] Cisco network devices running Cisco IOS XR Software with Cisco Discovery Protocol (CDP) enabled

[Impact] An unauthenticated, adjacent attacker in the same Layer 2 broadcast domain can execute arbitrary code with administrative privileges or cause a denial of service (device reload)

[Mitigation] Apply official Cisco software patches immediately, or disable CDP globally/on untrusted interfaces as a temporary workaround

[Affected Scope] DrayTek Vigor2960 (1.3.1_Beta and prior), Vigor3900 (1.4.4_Beta and prior), and Vigor300B (1.3.3_Beta, 1.4.2.1_Beta, 1.4.4_Beta and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the web management interface, leading to complete device compromise

[Mitigation] Immediately upgrade the device firmware to version v1.5.1 or higher, and disable WAN-side web management access

[Affected Scope] OpenSMTPD version 6.6 running with the default 'uncommented' configuration on OpenBSD 6.6 and other platforms.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by injecting shell metacharacters into the MAIL FROM field of an SMTP session.

[Mitigation] Immediately upgrade OpenSMTPD to the patched version 6.6.1p1, 6.6.2p1, or later.

[Affected Scope] Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, including WebLogic Server environments utilizing these components

[Impact] Unauthenticated remote attackers can exploit this vulnerability via the T3 protocol to execute arbitrary code and achieve complete takeover of the target system

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to the T3/T3S protocols (default port 7001) using connection filters

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the WebLogic Server via malicious IIOP requests

[Mitigation] Apply the official Oracle CPU patches immediately, or disable the IIOP protocol and restrict access to port 7001