CVE Vulnerability Advisory Database

[Affected Scope] JBoss Application Server shipped with Red Hat Enterprise Application Platform (EAP) 5.2, specifically when the HTTP Invoker (ReadOnlyAccessFilter) is enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with the privileges of the JBoss process by sending crafted serialized Java objects.

[Mitigation] Apply official Red Hat security updates, disable or restrict access to the HTTP Invoker servlet, or block serialization payloads using a Web Application Firewall (WAF).

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46, and 7.0.0 to 7.0.81 when the 'readonly' parameter of the DefaultServlet is set to false

[Impact] Unauthenticated remote attackers can upload malicious JSP files using crafted HTTP PUT requests, leading to arbitrary code execution with the privileges of the Tomcat process

[Mitigation] Upgrade Apache Tomcat to the latest secure versions, or modify the web.xml configuration to ensure the 'readonly' parameter is set to true (default)

[Affected Scope] Cisco network devices running Cisco IOS Software versions 12.2 through 15.6 or Cisco IOS XE Software with the DHCP relay subsystem enabled.

[Impact] An unauthenticated, remote attacker can execute arbitrary code with full system privileges (RCE) or trigger a system reload, causing a complete Denial of Service (DoS).

[Mitigation] Apply the official Cisco software updates immediately, or implement access control lists (ACLs) to block unauthorized DHCPv4 traffic and disable DHCP relay where not required.

[Affected Scope] Multiple D-Link (including DIR-636L) and TRENDnet devices utilizing the ncc service

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with system privileges via the ping_addr parameter in ping.ccp

[Mitigation] Immediately update to the latest secure firmware version and disable external WAN management access

[Affected Scope] Apache Tomcat versions 7.0.0 to 7.0.79 running on Windows with the 'readonly' initialization parameter set to 'false'.

[Impact] Unauthenticated remote attackers can upload malicious JSP files via specially crafted HTTP PUT requests, leading to arbitrary code execution under the context of the Tomcat process.

[Mitigation] Immediately upgrade Apache Tomcat to version 7.0.81 or later, or revert the 'readonly' parameter to 'true' in the web.xml configuration.

[Affected Scope] Apache Struts versions 2.1.1 through 2.3.33 and 2.5 through 2.5.12 using the REST plugin

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending malicious XML payloads

[Mitigation] Immediately upgrade Apache Struts to version 2.3.34 or 2.5.13 or higher, or restrict/disable XML handling in the REST plugin

[Affected Scope] Systems running Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7

[Impact] Remote attackers can execute arbitrary code with the privileges of the current user via a malicious document or application

[Mitigation] Apply the official Microsoft security patches immediately and restrict untrusted outbound SOAP/WSDL connections

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP2

[Impact] Unauthenticated remote attackers can exploit the vulnerable RadAsyncUpload component to upload arbitrary malicious files (such as ASPX webshells) and execute arbitrary code with web server privileges

[Mitigation] Immediately upgrade Telerik UI for ASP.NET AJAX to R2 2017 SP2 or later, or apply workarounds by disabling RadAsyncUpload and hardening encryption keys

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions before R1 2017 and R2 before R2 2017 SP2

[Impact] Remote attackers can exploit weak encryption to perform unrestricted file uploads or execute arbitrary code on the target server

[Mitigation] Upgrade to the latest patched version of Telerik UI, or configure strong custom encryption keys in web.config

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] An authenticated, remote attacker can execute arbitrary code with full system control or cause a denial of service (system reload)

[Mitigation] Apply official Cisco software updates, or implement workarounds by restricting SNMP views to exclude vulnerable MIBs and enforcing ACLs

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system privileges or trigger a device reload (DoS) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates, restrict SNMP access using ACLs, enforce strong community strings/credentials, or disable vulnerable MIB views

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 users)

[Impact] An authenticated remote attacker can send crafted SNMP packets to trigger a buffer overflow, causing a system reload (DoS) or executing arbitrary code with full administrative privileges

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required

[Affected Scope] All Cisco devices running Cisco IOS or IOS XE software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] An authenticated, remote attacker can execute arbitrary code with full system privileges or trigger a device reload, causing a complete Denial of Service (DoS)

[Mitigation] Apply official software updates via Cisco IOS Software Checker, or implement workarounds including SNMP View restrictions and Access Control Lists (ACLs)

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed community strings or user credentials.

[Impact] Authenticated remote attackers can trigger a buffer overflow via crafted SNMP packets, leading to system reload (DoS) or full remote code execution (RCE) with administrative privileges.

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required.

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system control or trigger a device reload by sending crafted SNMP packets

[Mitigation] Apply official software updates via Cisco IOS Software Checker, or implement SNMPv3 hardening and MIB filtering workarounds

[Affected Scope] Cisco IOS and IOS-XE network devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 user credentials).

[Impact] An authenticated, remote attacker can send crafted SNMP packets to trigger a buffer overflow, leading to a system reload or arbitrary remote code execution (RCE) with full administrative control.

[Mitigation] Apply official Cisco software patches immediately, or restrict SNMP access using Infrastructure ACLs and enforce complex community strings as a temporary workaround.

[Affected Scope] All Cisco devices running Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system privileges or trigger a device reload, leading to complete infrastructure compromise or denial of service

[Mitigation] Apply fixed software versions via Cisco IOS Software Checker, or implement workarounds including SNMP community ACLs, MIB view restrictions, or disabling SNMP

[Affected Scope] PHPUnit versions before 4.8.28 and 5.x versions before 5.6.3

[Impact] Remote attackers can execute arbitrary PHP code and compromise the underlying server by accessing the exposed /vendor directory

[Mitigation] Upgrade PHPUnit to a secure version and restrict external HTTP access to the /vendor directory via web server configuration

[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.

[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.

[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.

[Affected Scope] SKYSEA Client View Ver.11.221.03 and earlier

[Impact] Remote attackers can bypass authentication to execute arbitrary system commands and gain full control over the target system

[Mitigation] Apply the official vendor security patch immediately and restrict network access to the management console ports