CVE Vulnerability Advisory Database

[Affected Scope] ConnectWise ScreenConnect versions 23.9.7 and prior

[Impact] Attackers can bypass authentication to create administrative accounts, leading to full system compromise and Remote Code Execution (RCE) [1, 1.1]

[Mitigation] Immediately upgrade to the patched version (23.9.8 or higher) and restrict external access to the management interface

[Affected Scope] On-premise deployments of ConnectWise ScreenConnect version 23.9.7 and prior

[Impact] Attackers can exploit a path traversal vulnerability to escape restricted directories, upload malicious files, and achieve arbitrary remote code execution (RCE)

[Mitigation] Immediately upgrade ConnectWise ScreenConnect to the patched version (23.9.8 or higher)

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-20953

[Impact] Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6....

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions

[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets

[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-21413

[Impact] Microsoft Outlook Remote Code Execution Vulnerability...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All supported versions of Windows 10, 11, and Windows Server

[Impact] Attackers can bypass Windows Defender SmartScreen warnings using crafted Internet Shortcut (.url) files to execute arbitrary code

[Mitigation] Apply the official Microsoft security updates immediately and restrict outbound SMB/WebDAV traffic

[Affected Scope] Microsoft Exchange Server 2016 and 2019 environments where Cumulative Updates and Extended Protection are not enabled.

[Impact] Unauthenticated remote attackers can perform NTLM credential relay attacks to elevate privileges, gaining administrative access to Exchange servers and compromising mailboxes.

[Mitigation] Upgrade Exchange Server to the latest Cumulative Update (CU) and enforce the Extended Protection feature immediately.

[Affected Scope] Microsoft Windows 10, 11, and Windows Server 2016, 2019, 2022 with SmartScreen enabled

[Impact] Attackers can bypass SmartScreen warnings and Mark-of-the-Web (MotW) protections to execute arbitrary code on the victim's system without user consent

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and enforce strict Group Policies (GPO) to restrict untrusted file execution

[Affected Scope] Multiple versions of Windows operating systems, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.

[Impact] Local attackers can escalate privileges to SYSTEM level, bypass security agents, and execute arbitrary code in kernel space.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and audit systems for indicators of compromise (IoCs).

[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x), and Ivanti Neurons for ZTA

[Impact] Unauthenticated remote attackers can exploit the SAML component to bypass authentication and access restricted internal resources

[Mitigation] Immediately apply the official vendor security patches or import the temporary mitigation XML profile

[Affected Scope] Linux kernel versions from v5.14 up to v6.6.14 with the nf_tables module enabled

[Impact] Local unprivileged users can trigger kernel memory corruption, leading to arbitrary code execution and full root privilege escalation

[Mitigation] Apply the official kernel patch or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] Jenkins weekly version 2.441 and earlier, LTS version 2.426.2 and earlier

[Impact] Unauthenticated attackers can read arbitrary files on the Jenkins controller file system, potentially leading to Remote Code Execution (RCE) under specific conditions

[Mitigation] Immediately upgrade Jenkins weekly to 2.442 or later, and LTS to 2.426.3 or later, or disable CLI access

[Affected Scope] Devices running Safari prior to 17.3, iOS/iPadOS 15.8.7/16.7.5/17.3, macOS Monterey/Ventura/Sonoma, tvOS, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) due to a type confusion issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.

[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances running vulnerable firmware versions

[Impact] Unauthenticated remote attackers can trigger a Denial of Service (DoS) state or perform Out-Of-Bounds Memory Reads to access sensitive data

[Mitigation] Immediately upgrade to the latest patched firmware versions recommended by Citrix and restrict external access

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances with management interfaces (NSIP, CLIP, or SNIP) exposed and possessing authenticated (low-privileged) credentials

[Impact] Authenticated attackers can perform remote code execution (RCE) on the management interface, potentially leading to full system compromise

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict access to management interfaces (NSIP, CLIP, SNIP)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.224

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or sensitive information disclosure within the browser renderer process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (120.0.6099.224 or higher)

[Affected Scope] Older versions of Atlassian Confluence Data Center and Server (8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands (RCE) on the affected instance by sending specially crafted HTTP requests.

[Mitigation] Immediately upgrade to the latest patched versions (8.5.4+ or newer LTS releases) provided by Atlassian.

[Affected Scope] Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) gateway appliances

[Impact] An authenticated administrator can send specially crafted HTTP requests to execute arbitrary OS commands with root privileges, leading to full appliance compromise

[Mitigation] Apply the official vendor security patches immediately, or import the temporary mitigation XML file provided by Ivanti to block vulnerable API endpoints