CVE Vulnerability Advisory Database

[Affected Scope] Any network devices, virtualization hosts (such as VMware ESXi), and storage systems exposed to the internet with the Service Location Protocol (SLP, RFC 2608) enabled

[Impact] Unauthenticated remote attackers can leverage spoofed UDP traffic to launch massive reflective Denial-of-Service (DDoS) attacks, achieving an extreme amplification factor of up to 2,200x

[Mitigation] Immediately block external access to SLP ports (UDP/TCP 427) or completely disable the SLP daemon in environments where it is not required

[Affected Scope] Zyxel ZyWALL/USG (4.60 to 4.73), VPN (4.60 to 5.35), USG FLEX (4.60 to 5.35), and ATP (4.60 to 5.35) series firmware

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending crafted IKE UDP packets to the affected device

[Mitigation] Immediately upgrade to the latest official patched firmware version and restrict access to IKE ports (UDP 500/4500) from untrusted WAN interfaces

[Affected Scope] Apache Superset installations up to and including version 2.0.1 that have not altered the default configured SECRET_KEY.

[Impact] Unauthorized attackers can forge session cookies to authenticate as administrators, leading to unauthorized resource access, database compromise, and potential Remote Code Execution (RCE).

[Mitigation] Immediately configure a unique, cryptographically strong, randomly generated SECRET_KEY in 'superset_config.py' or via environment variables.

[Affected Scope] PaperCut NG and MF versions 22.0.5 (Build 63914) and earlier

[Impact] Unauthenticated remote attackers can bypass authentication to gain administrative access and execute arbitrary code with system privileges

[Mitigation] Immediately upgrade to the latest patched versions (22.0.9 or higher) and restrict external access to management ports 9191 and 9192

[Affected Scope] Systems running unpatched versions impacted by CVE-2023-27350

[Impact] This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentic...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All Strapi deployments running version 4.5.5 or earlier.

[Impact] Authenticated attackers with admin panel access can leak sensitive user data, including password hashes and reset tokens, via side-channel inference.

[Mitigation] Immediately upgrade Strapi to version 4.6.0 or later.

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137

[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.121

[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.121 or higher)

[Affected Scope] Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers

[Impact] An authenticated, remote attacker can execute arbitrary commands with root-level privileges, leading to complete device compromise

[Mitigation] Since these devices are End-of-Life (EoL) and no patches will be released, administrators must disable remote management or replace the devices immediately

[Affected Scope] Windows 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022 utilizing the clfs.sys driver

[Impact] Local attackers can execute arbitrary code with SYSTEM privileges, fully compromising the host and disabling security controls

[Mitigation] Apply the Microsoft April 2023 security updates immediately, or restrict .blf file creation permissions as a temporary workaround

[Affected Scope] Windows 10, 11, and Windows Server deployments running the CNG Key Isolation (KeyIso) service

[Impact] Local authenticated attackers with low privileges can execute arbitrary code with SYSTEM privileges by running a specially crafted application

[Mitigation] Apply the latest Microsoft Cumulative Updates (LCU) immediately and restrict unauthorized local access

[Affected Scope] All on-premises and cloud web application servers running Novi Survey versions prior to 8.9.43676.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and malicious code under the security context of the web service account.

[Mitigation] Immediately upgrade to the official patched version (8.9.43676 or higher) and restrict external access to the application.

[Affected Scope] iOS and iPadOS versions prior to 15.7.5 / 16.4.1, macOS Big Sur prior to 11.7.6, Monterey prior to 12.6.5, and Ventura prior to 13.3.1

[Impact] A local application can execute arbitrary code with kernel privileges, leading to complete system compromise. This vulnerability is actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple (e.g., iOS 16.4.1, macOS 13.3.1)

[Affected Scope] Systems running Safari prior to 16.4.1, iOS/iPadOS prior to 15.7.5 and 16.4.1, and macOS Ventura prior to 13.3.1

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution due to a Use-After-Free memory corruption issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] ARM Mali GPU Kernel Drivers (Midgard r6p0-r32p0, Bifrost r0p0-r42p0, Valhall r19p0-r42p0, Avalon r41p0-r42p0)

[Impact] A local non-privileged user can perform valid GPU processing operations to expose sensitive kernel metadata, facilitating KASLR bypass and local privilege escalation (LPE)

[Mitigation] Apply official security patches from chipset vendors and OEMs, and immediately upgrade device firmware to the latest version

[Affected Scope] Sophos Web Appliance versions prior to 4.3.10.4

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending specially crafted HTTP requests.

[Mitigation] Immediately upgrade Sophos Web Appliance to version 4.3.10.4 or higher, or migrate to a supported alternative solution due to the product's End-of-Life (EOL) status.

[Affected Scope] Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x

[Impact] Unauthenticated attackers can bypass security restrictions to gain administrative access and chain it with Server-Side Template Injection (SSTI) to execute arbitrary code

[Mitigation] Immediately upgrade to patched versions (9.4.0.1, 9.3.0.2 or later) and restrict external access to the Pentaho management interface

[Affected Scope] Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x

[Impact] Remote attackers can inject malicious Spring templates via specific web services, leading to Server-Side Template Injection (SSTI) and arbitrary code execution.

[Mitigation] Immediately upgrade affected Pentaho instances to patched versions (9.4.0.1, 9.3.0.2 or higher) and restrict external access.

[Affected Scope] Android operating system versions 11, 12, 12L, and 13

[Impact] Local attackers can escalate privileges to the SYSTEM level without any user interaction or additional execution privileges

[Mitigation] Immediately update the system to the March 2023 Android Security Patch Level (2023-03-01) or later

[Affected Scope] Cobalt Strike version 4.7.1

[Impact] Remote attackers can execute arbitrary code within the Cobalt Strike UI context by injecting crafted HTML payloads

[Mitigation] Immediately upgrade to Cobalt Strike version 4.7.2 or later, and restrict access to the Teamserver