CVE Vulnerability Advisory Database

[Affected Scope] Apache OFBiz versions prior to 18.12.16

[Impact] Unauthenticated remote attackers can bypass authorization checks to access internal business logic and sensitive data directly, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade Apache OFBiz to the official patched version 18.12.16 or higher.

[Affected Scope] Progress WhatsUp Gold versions released before 2024.0.0

[Impact] An unauthenticated remote attacker can execute arbitrary SQL queries to retrieve sensitive database information, including encrypted user password hashes

[Mitigation] Immediately upgrade WhatsUp Gold to version 2024.0.0 or later and restrict database and web console access

[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions

[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall

[Affected Scope] Authenticated Versa Director systems with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges

[Impact] Authenticated attackers can exploit the 'Change Favicon' feature to upload malicious files masquerading as .png images, leading to arbitrary code execution on the host system

[Mitigation] Apply the official security patches from Versa Networks immediately and restrict access to the management GUI to trusted IP addresses only

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and prior versions

[Impact] Remote unauthenticated attackers can exploit hardcoded credentials to access internal functionality and modify sensitive data.

[Mitigation] Immediately apply the official SolarWinds 12.8.3 Hotfix 2 or later, and restrict external network access.

[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)

[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 128.0.6613.84

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process

[Mitigation] Immediately update Google Chrome to the latest stable version (128.0.6613.84/.85 or higher)

[Affected Scope] Kingsoft WPS Office on Windows, versions 12.2.0.13110 up to (but excluding) 12.2.0.16412

[Impact] An attacker can achieve arbitrary Windows library (DLL) loading and remote code execution (RCE) by tricking a user into opening a specially crafted spreadsheet document

[Mitigation] Immediately upgrade Kingsoft WPS Office to the patched version (12.2.0.16412 or higher) and restrict opening untrusted documents

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and all prior versions

[Impact] Successful exploitation allows remote attackers to execute arbitrary commands on the host machine via unsafe Java deserialization, potentially leading to full system compromise

[Mitigation] Immediately apply the official SolarWinds Web Help Desk 12.8.3 Hotfix 1 or upgrade to the latest patched version

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-7593

[Impact] Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) security warnings, leading users to execute malicious files without any security prompts

[Mitigation] Apply the official Microsoft security updates immediately and harden SmartScreen policies

[Affected Scope] Most versions of Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local attackers can exploit kernel memory corruption to execute arbitrary code with SYSTEM privileges

[Mitigation] Immediately apply the Microsoft August 2024 security updates and monitor for unauthorized local account activities

[Affected Scope] Microsoft Project 2016, LTSC Professional Plus 2021, and Microsoft 365 Apps for Enterprise

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted Project (.mpp) file

[Mitigation] Apply the official Microsoft security updates immediately and enforce strict policies to block untrusted macro and external content execution

[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled

[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages

[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Immediately apply the Microsoft official cumulative security updates released in August 2024 or later

[Affected Scope] Windows 10, 11, and Windows Server 2008 through 2022 environments

[Impact] A local attacker with low privileges can exploit a race condition to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft August 2024 security updates and restrict local access on unpatched systems

[Affected Scope] Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136)

[Impact] An authenticated attacker with administrative privileges can execute arbitrary commands with system privileges via argument injection during the boot process

[Mitigation] Immediately upgrade to the patched firmware version recommended by Mitel and restrict access to the administrative interfaces

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 9.0 and 10.0 utilizing the classic webmail user interface.

[Impact] Successful exploitation allows remote attackers to execute arbitrary JavaScript code in the context of the victim's browser session, potentially leading to session hijacking and unauthorized data access.

[Mitigation] Apply official security patches (9.0.0 Patch 39, 10.0.7 or higher) immediately, or restrict access to the classic UI.

[Affected Scope] TeamT5 ThreatSonar Anti-Ransomware platform

[Impact] Remote attackers with administrator privileges can upload malicious files to execute arbitrary system commands on the server

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to the admin console

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1050

[Impact] Unauthenticated remote attackers can write arbitrary files with SYSTEM authority, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1050 or later, and restrict external network access.