CVE Vulnerability Advisory Database

[Affected Scope] Ivanti Connect Secure (ICS) versions 9.x, 22.x and Ivanti Policy Secure gateways

[Impact] Unauthenticated remote attackers can bypass access control checks on the web component, gaining unauthorized access to restricted resources and sensitive configuration data

[Mitigation] Immediately apply the official vendor patches or import the temporary mitigation XML profile provided by Ivanti to block the exploitation path

[Affected Scope] GitLab CE/EE versions 16.1 to 16.7.1 (prior to 16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, and 16.7.2)

[Impact] An unauthenticated remote attacker can trigger password reset emails to be sent to an arbitrary, unverified email address, leading to complete account takeover.

[Mitigation] Immediately upgrade GitLab instances to the patched versions (16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, 16.7.2 or later) and enforce Multi-Factor Authentication (MFA).

[Affected Scope] Apple devices running iOS and iPadOS versions prior to 17, or iOS and iPadOS versions prior to 15.8.7

[Impact] A local malicious application can exploit a Use-After-Free vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise

[Mitigation] Immediately apply official Apple software updates to upgrade to iOS 17, iOS 15.8.7, or later versions

[Affected Scope] Apple operating systems prior to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, watchOS 9.2, and tvOS 16.2

[Impact] A local attacker with arbitrary read and write capabilities can bypass Pointer Authentication (PAC) to achieve full kernel-level code execution

[Mitigation] Immediately update affected devices to iOS 16.2, iPadOS 16.2, macOS Ventura 13.1, or later versions

[Affected Scope] Linux systems utilizing the Netfilter (nftables) subsystem within the Linux kernel

[Impact] Local attackers can trigger kernel memory corruption, leading to arbitrary code execution with root privileges and complete system compromise

[Mitigation] Apply the latest kernel security patches from your distribution vendor, or restrict unprivileged user namespace creation as an immediate workaround

[Affected Scope] All applications utilizing Spreadsheet::ParseExcel library version 0.65 and prior

[Impact] Remote attackers can execute arbitrary Perl code and gain full system privileges by tricking the application into parsing a specially crafted Excel file

[Mitigation] Immediately upgrade the Spreadsheet::ParseExcel module to the patched version (0.66 or later)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.129

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)

[Mitigation] Immediately update Google Chrome to the latest stable version (120.0.6099.129 or higher)

[Affected Scope] Legacy QNAP VioStor NVR models running QVR Firmware 4.x

[Impact] Authenticated attackers can execute arbitrary OS commands via network requests, potentially leading to full system compromise

[Mitigation] Immediately upgrade QVR Firmware to version 5.0.0 or later, or restrict network access to the device

[Affected Scope] FXC AE1021PE firmware version 2.0.9 and earlier, and AE1021 firmware version 2.0.9 and earlier

[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges, potentially leading to full device takeover and botnet recruitment

[Mitigation] Immediately apply the official firmware patch (v2.0.10 or later) and restrict access to the management interface

[Affected Scope] SonicWall SMA100 series (SMA 200, 210, 400, 410, 500v) running firmware versions 10.2.1.11-63sv and below.

[Impact] A remote authenticated attacker with administrative privileges can inject arbitrary OS commands via the management interface, executing them with 'nobody' user privileges.

[Mitigation] Immediately upgrade the SMA100 firmware to the patched version (10.2.1.12-65sv or higher) and restrict access to the management interface.

[Affected Scope] Unitronics Vision and Samba PLCs and HMIs configured using VisiLogic versions prior to 9.9.00

[Impact] Unauthenticated remote attackers with network access can exploit default administrative credentials to gain full control of the target system

[Mitigation] Upgrade VisiLogic to version 9.9.00 or later, change default passwords immediately, and restrict external network exposure

[Affected Scope] Devices powered by Qualcomm Snapdragon chipsets running Linux or Android kernel-based graphics drivers

[Impact] Local attackers can trigger kernel memory corruption via malicious IOCTL calls, leading to Local Privilege Escalation (LPE) to Root/Kernel level

[Mitigation] Apply the official security patches released by Qualcomm and device OEMs in or after December 2023

[Affected Scope] Android and embedded devices powered by Qualcomm Snapdragon chipsets utilizing specific KGSL GPU driver versions

[Impact] Local attackers can trigger kernel memory corruption via crafted IOCTL calls, leading to Local Privilege Escalation (LPE) and arbitrary code execution with root privileges

[Mitigation] Immediately apply the official security patches released by device OEMs and Qualcomm in or after December 2023

[Affected Scope] Android and embedded devices powered by Qualcomm chipsets utilizing DSP (Digital Signal Processor) services

[Impact] Local attackers with low privileges can trigger a Use-After-Free condition via remote calls from HLOS to DSP, leading to kernel-level privilege escalation and arbitrary code execution (actively exploited in the wild)

[Mitigation] Immediately apply the Qualcomm December 2023 security patch or the latest Android security update provided by your device OEM

[Affected Scope] Apple iOS prior to 17.1.2, iPadOS prior to 17.1.2, macOS Sonoma prior to 14.1.2, and Safari prior to 17.1.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution, with active exploitation reported in the wild

[Mitigation] Immediately apply the official Apple software updates to upgrade operating systems and Safari to the patched versions

[Affected Scope] Apple devices running versions prior to iOS 17.1.2, iPadOS 17.1.2, macOS Sonoma 14.1.2, and Safari 17.1.2

[Impact] Processing maliciously crafted web content may lead to out-of-bounds memory access, disclosing sensitive information and potentially enabling sandbox escape or remote code execution

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2 or later) and enable Lockdown Mode for high-risk users

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)

[Affected Scope] ownCloud Core versions from 10.6.0 up to (but excluding) 10.13.1 are affected.

[Impact] Unauthenticated attackers can access, modify, or delete any file if they know the victim's username and the victim has no signing-key configured.

[Mitigation] Immediately upgrade ownCloud Core to version 10.13.1 or higher, and enforce signing-key configurations as a temporary workaround.

[Affected Scope] ownCloud graphapi app versions 0.2.0 to 0.2.0, and 0.3.0 to 0.3.0 (both containerized and non-containerized environments)

[Impact] Unauthenticated attackers can access a specific URL to execute phpinfo(), exposing sensitive environment variables including admin passwords, mail server credentials, and license keys

[Mitigation] Immediately upgrade the graphapi app to version 0.2.1 or 0.3.1 (or higher), and rotate all potentially exposed credentials

[Affected Scope] Qlik Sense Enterprise for Windows (prior to specified patch levels)

[Impact] Unauthenticated remote attackers can elevate privileges and execute arbitrary code on the backend repository server via HTTP request tunneling.

[Mitigation] Immediately apply the official security patches (August 2023 Patch 2 or later, etc.) provided by the vendor.