CVE Vulnerability Advisory Database

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.2, and 12.2.1.3

[Impact] Unauthenticated remote attackers can exploit this vulnerability via the T3 protocol to execute arbitrary code and completely take over the WebLogic Server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external T3 protocol access (Port 7001) using connection filters or firewalls

[Affected Scope] Spring Data Commons versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending specially crafted HTTP request parameters.

[Mitigation] Immediately upgrade Spring Data Commons to version 1.13.11, 2.0.6, or later, and apply input validation controls.

[Affected Scope] Drupal versions prior to 7.58, 8.3.9, 8.4.6, and 8.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system-level control of the web server by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Drupal Core to the patched versions (7.58, 8.3.9, 8.4.6, 8.5.1 or higher)

[Affected Scope] Cisco devices running Cisco IOS, IOS XE, or IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled.

[Impact] An unauthenticated, adjacent attacker can send crafted LLDP packets to trigger a denial of service (DoS) or execute arbitrary code with elevated privileges.

[Mitigation] Apply official Cisco software updates immediately, or disable LLDP globally/per-interface as a temporary workaround.

[Affected Scope] Cisco network switches and routers running Cisco IOS and IOS XE Software with the Smart Install client feature enabled.

[Impact] Unauthenticated, remote attackers can send crafted packets to TCP port 4786, triggering a heap-based buffer overflow that leads to device reload (DoS) or arbitrary code execution (RCE) with elevated privileges.

[Mitigation] Disable the Smart Install feature using the 'no vstack' command, or restrict access to TCP port 4786 using Infrastructure Access Control Lists (ACLs) if the feature is required.

[Affected Scope] Cisco IOS, IOS XE, and IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled

[Impact] An unauthenticated, adjacent attacker could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) condition

[Mitigation] Apply official Cisco software updates or disable LLDP globally/per-interface as a temporary workaround

[Affected Scope] Cisco IOS and IOS XE Software with the Quality of Service (QoS) subsystem enabled and listening on UDP port 18999.

[Impact] An unauthenticated, remote attacker can execute arbitrary code with elevated privileges or cause a denial of service (DoS) condition via device reload.

[Mitigation] Apply official Cisco software updates, or restrict access to UDP port 18999 using Infrastructure Access Control Lists (iACLs).

[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27

[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges

[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical

[Affected Scope] Cisco Secure Access Control System (ACS) prior to release 5.8 Patch 9

[Impact] An unauthenticated, remote attacker can execute arbitrary commands on the affected device with root privileges by sending a crafted serialized Java object

[Mitigation] Immediately upgrade to Cisco ACS 5.8 Patch 9 or later, or restrict network access to vulnerable ports

[Affected Scope] SAP CRM versions 7.01, 7.02, 7.30, 7.31, 7.33, and 7.54

[Impact] Attackers can bypass path validation using directory traversal sequences to upload malicious JSP files, leading to arbitrary Remote Code Execution (RCE)

[Mitigation] Apply SAP Security Note 2547431 immediately and implement WAF rules to block directory traversal patterns (../)

[Affected Scope] All Exim versions before 4.90.1 with active SMTP listener

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges by sending specially crafted Base64 messages

[Mitigation] Immediately upgrade Exim mail servers to the latest stable version (4.90.1 or higher) and restrict SMTP access

[Affected Scope] Adobe Flash Player versions prior to 28.0.0.161 (specifically affecting Primetime SDK components)

[Impact] Remote attackers can execute arbitrary code with the privileges of the current user by tricking them into opening crafted Flash content

[Mitigation] Upgrade Adobe Flash Player to version 28.0.0.161 or later, or completely uninstall/disable Flash Player across the enterprise

[Affected Scope] Jenkins weekly versions 2.56 and earlier, and LTS versions 2.46.1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the Jenkins master node by sending a serialized Java SignedObject

[Mitigation] Immediately upgrade Jenkins to version 2.57+ or LTS 2.46.2+, and disable the legacy remoting-based CLI protocol

[Affected Scope] Equation Editor (EQNEDT32.EXE) included in Microsoft Office 2007, 2010, 2013, and 2016

[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to open a specially crafted document containing malicious OLE objects

[Mitigation] Apply the official Microsoft security patches immediately, or disable the Equation Editor component via registry modification

[Affected Scope] Equation Editor (EQNEDT32.EXE) component included in Microsoft Office 2007, 2010, 2013, and 2016

[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a specially crafted Office document containing malicious OLE objects

[Mitigation] Apply official Microsoft security patches immediately, or disable the legacy Equation Editor component via registry modifications

[Affected Scope] Java web applications utilizing Primetek PrimeFaces framework version 5.x and below

[Impact] Unauthenticated remote attackers can exploit weak encryption keys to inject arbitrary serialized objects, leading to Remote Code Execution (RCE) on the target server

[Mitigation] Upgrade PrimeFaces to a secure version (6.0 or higher) and configure a strong, unique custom secret key in web.xml

[Affected Scope] PAN-OS versions before 6.1.19, 7.0.19, 7.1.14, and 8.0.6 management interface

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the management interface, leading to complete device compromise

[Mitigation] Immediately upgrade to the patched versions and restrict access to the management interface from the public internet

[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016, and systems utilizing the legacy Equation Editor (EQNEDT32.EXE) component

[Impact] Successful exploitation allows remote attackers to execute arbitrary code (RCE) in the context of the current user by tricking them into opening a specially crafted Office document

[Mitigation] Apply the official Microsoft security updates immediately, or disable the Equation Editor component via registry modification to prevent execution

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, and 12.2.1.2.0

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the WebLogic Server via crafted XML payloads sent over HTTP/T3

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or disable the vulnerable 'wls-wsat' component and restrict T3 protocol access

[Affected Scope] Microsoft Outlook 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and Office memory handling components

[Impact] Attackers can bypass the Outlook sandbox and execute arbitrary OS commands with local user privileges by injecting malicious Folder Home Page properties

[Mitigation] Apply official Microsoft security updates and disable the Outlook Folder Home Page feature via registry modifications