CVE Vulnerability Advisory Database

[Affected Scope] TP-Link TL-WR841N wireless routers

[Impact] Network-adjacent attackers can bypass authentication to access the httpd service (TCP port 80) and disclose stored credentials, leading to full device compromise

[Mitigation] Apply the latest official firmware updates from the vendor and disable remote management features immediately

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software

[Impact] An authenticated, local attacker with administrator privileges can execute arbitrary code with root-level privileges and establish persistence across device reboots by preloading crafted files

[Mitigation] Apply the official security updates provided by Cisco immediately and audit the flash file system for unauthorized files

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software with management or VPN web server enabled.

[Impact] An unauthenticated, remote attacker can trigger an unexpected device reload by sending a crafted HTTP request, leading to a complete Denial of Service (DoS) condition.

[Mitigation] Apply official Cisco software patches immediately. Restrict access to management interfaces and monitor VPN ports for anomalous HTTP headers as temporary workarounds.

[Affected Scope] All versions of CrushFTP prior to 10.7.1 and 11.1.0 across all operating system platforms

[Impact] Unauthenticated remote attackers can bypass the VFS Sandbox, read arbitrary files from the filesystem, bypass authentication to gain administrative access, and execute arbitrary code on the server.

[Mitigation] Immediately upgrade CrushFTP to the patched versions (10.7.1 or 11.1.0 or higher) and apply WAF rules to block template injection payloads.

[Affected Scope] Apache HugeGraph-Server versions from 1.0.0 before 1.3.0 running on Java 8 & Java 11

[Impact] Unauthenticated remote attackers can bypass security controls and execute arbitrary system commands via the Gremlin query engine, leading to full system compromise

[Mitigation] Upgrade Apache HugeGraph-Server to version 1.3.0 or higher with Java 11, and ensure the Authentication system is enabled

[Affected Scope] Palo Alto Networks PAN-OS 10.2, 11.0, and 11.1 firewalls with GlobalProtect gateway or portal enabled

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the firewall via specially crafted requests

[Mitigation] Immediately apply the official PAN-OS hotfix, or implement temporary workarounds such as disabling Device Telemetry or applying Threat Prevention signatures

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server utilizing Microsoft Defender SmartScreen

[Impact] Attackers can bypass Mark-of-the-Web (MotW) warnings and SmartScreen prompts entirely, leading to arbitrary code execution when a user opens a crafted malicious file

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict the execution of unverified downloaded files via Group Policy

[Affected Scope] Google Pixel devices and Android operating system versions prior to April 2024 security patch

[Impact] Local attackers can bypass memory protection mechanisms during bootloader transitions to dump memory, extract cryptographic keys, and escalate privileges

[Mitigation] Apply the Google April 2024 Pixel Security Update immediately to patch the bootloader logic

[Affected Scope] Google Pixel devices and Android operating system

[Impact] Local attackers can disclose sensitive system memory information without requiring additional execution privileges or user interaction

[Mitigation] Immediately apply the April 2024 Google Pixel security update and upgrade to the latest firmware version

[Affected Scope] All firmware versions of End-of-Life (EOL) D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L

[Impact] Unauthenticated remote attackers can leverage hardcoded credentials and inject arbitrary system commands to achieve full system compromise

[Mitigation] Since these products are no longer supported, it is strongly recommended to immediately retire and replace the affected devices

[Affected Scope] All firmware versions of legacy D-Link NAS models DNS-320L, DNS-325, DNS-327L, and DNS-340L.

[Impact] Remote unauthenticated attackers can bypass authentication using hard-coded credentials, leading to complete system compromise and arbitrary code execution.

[Mitigation] Since these devices are End-of-Life (EOL) and will not receive security patches, they must be immediately decommissioned and replaced.

[Affected Scope] Systems running affected versions of Microsoft .NET Framework and .NET Core, particularly within IIS or web application server environments.

[Impact] Unauthenticated remote attackers can trigger specific exceptions to obtain sensitive debugging information, including internal system paths and memory states.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and disable detailed error messages in the web.config configuration.

[Affected Scope] Adobe ColdFusion 2023 Update 6 and earlier, and ColdFusion 2021 Update 12 and earlier

[Impact] Unauthenticated attackers can bypass access controls to read or modify arbitrary files on the host system, potentially exposing sensitive configuration data

[Mitigation] Apply the official Adobe APSB24-14 security patch immediately and restrict external internet access to the ColdFusion administrator panel

[Affected Scope] Broad range of Windows operating systems including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] Local authenticated attackers can execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply Microsoft official security patches and monitor for anomalous child processes spawned by the WER service

[Affected Scope] Fortinet FortiClientEMS versions 7.2.0 through 7.2.2, and 7.0.1 through 7.0.10

[Impact] An unauthenticated remote attacker can execute unauthorized code or system commands with database server privileges via specially crafted packets, leading to complete system compromise

[Mitigation] Immediately upgrade FortiClientEMS to patched versions (7.2.3+ or 7.0.11+) and restrict access to the management ports

[Affected Scope] iOS and iPadOS prior to 16.7.8 / 17.4, macOS Monterey prior to 12.7.6, macOS Ventura prior to 13.6.7, macOS Sonoma prior to 14.4, and other Apple OS platforms

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass critical kernel memory protections, leading to complete system compromise and arbitrary code execution

[Mitigation] Immediately apply the official security updates provided by Apple (iOS 17.4, macOS Sonoma 14.4, etc.) to all affected devices

[Affected Scope] Apple devices running iOS/iPadOS prior to 16.7.6 or 17.4, macOS Monterey prior to 12.7.4, Ventura prior to 13.6.5, Sonoma prior to 14.4, watchOS prior to 10.4, tvOS prior to 17.4, and visionOS prior to 1.1

[Impact] A local attacker with arbitrary kernel read and write capabilities can bypass kernel memory protections, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately update all affected Apple devices to the latest patched versions (e.g., iOS 17.4, macOS Sonoma 14.4)

[Affected Scope] JetBrains TeamCity on-premises servers prior to version 2023.11.4

[Impact] Unauthenticated attackers can bypass authentication via path traversal, allowing them to perform limited administrative actions (e.g., modifying system configurations, creating rogue accounts)

[Mitigation] Immediately upgrade TeamCity to version 2023.11.4 or later, or apply the official security patch plugin

[Affected Scope] All JetBrains TeamCity versions prior to 2023.11.4

[Impact] Unauthenticated remote attackers can completely bypass authentication mechanisms to gain administrative privileges, leading to full server compromise and arbitrary remote code execution (RCE)

[Mitigation] Immediately upgrade TeamCity server to version 2023.11.4 or later, or apply the official security patch plugin

[Affected Scope] Progress Kemp LoadMaster OS (LMOS) versions prior to 7.2.48.10, 7.2.54.8, and 7.2.59.2

[Impact] Unauthenticated remote attackers can access the system via the management interface to execute arbitrary OS commands and gain full system control

[Mitigation] Immediately upgrade to patched LMOS versions (7.2.59.2, 7.2.54.8, 7.2.48.10 or higher) and restrict external access to the management interface