CVE Vulnerability Advisory Database

[Affected Scope] Adobe ColdFusion 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier)

[Impact] Unauthenticated remote attackers can execute arbitrary code or access sensitive files in the context of the current user without any user interaction

[Mitigation] Immediately apply official vendor patches (ColdFusion 2018 Update 16, ColdFusion 2021 Update 6 or later) and restrict external access

[Affected Scope] Adobe ColdFusion 2018 Update 15 (and earlier) and ColdFusion 2021 Update 5 (and earlier).

[Impact] Successful exploitation allows unauthenticated remote attackers to execute arbitrary code in the context of the current user without any user interaction.

[Mitigation] Immediately apply the official Adobe security patches to upgrade to ColdFusion 2018 Update 16, ColdFusion 2021 Update 6, or later.

[Affected Scope] MinIO Multi-Cloud Object Storage deployments prior to RELEASE.2023-03-20T20-16-18Z

[Impact] An attacker can bypass metadata bucket name validation to upload arbitrary objects into any bucket, potentially leading to data tampering or system compromise

[Mitigation] Immediately upgrade MinIO to RELEASE.2023-03-20T20-16-18Z or later, or disable the browser Console API as a temporary workaround

[Affected Scope] MinIO distributed (cluster) deployments starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z

[Impact] Unauthenticated remote attackers can retrieve all system environment variables, including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD, leading to complete compromise of the storage cluster

[Mitigation] Immediately upgrade MinIO to RELEASE.2023-03-20T20-16-18Z or later, and rotate all potentially exposed root credentials immediately

[Affected Scope] Systems and container environments utilizing the Linux kernel OverlayFS subsystem

[Impact] A local attacker can escalate privileges to root by copying a setuid/capable file from a nosuid mount into another mount

[Mitigation] Apply the latest kernel security patches from your distribution or restrict unprivileged user namespaces as a temporary workaround

[Affected Scope] D-Link DIR-820L router with firmware version DIR820LA1_FW105B03 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a crafted HTTP request

[Mitigation] Since this product is End-of-Life (EOL), immediate hardware replacement is highly recommended; otherwise, disable remote management and restrict access

[Affected Scope] Array Networks Array AG Series and vxAG virtual appliances running version 9.4.0.481 and earlier

[Impact] Unauthenticated remote attackers can browse the filesystem of the SSL VPN gateway by manipulating the 'flags' attribute in HTTP headers, leading to full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to the patched firmware version released by the vendor, and restrict access to the management interface and VPN ports from untrusted networks

[Affected Scope] TP-Link Archer AX21 (AX1800) firmware versions prior to 1.1.4 Build 20230219

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP POST request

[Mitigation] Immediately upgrade to firmware version 1.1.4 Build 20230219 or later, and disable remote WAN management

[Affected Scope] All supported versions of Windows 10, Windows 11, and Windows Server

[Impact] Attackers can bypass Mark of the Web (MotW) warnings and Windows SmartScreen blocks using specially crafted signatures, leading to silent malware execution

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or restrict untrusted file execution using AppLocker/WDAC policies

[Affected Scope] All supported desktop versions of Microsoft Outlook for Windows, including Outlook 2013, 2016, LTSC 2021, and Microsoft 365 Apps

[Impact] Attackers can trigger the vulnerability silently without user interaction (Zero-Click) simply by sending a malicious email, leaking the user's NTLM hash to external servers for NTLM relay attacks

[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB traffic (TCP port 445) at the perimeter, and run the Exchange audit script to purge malicious items

[Affected Scope] All deployments of Veeam Backup & Replication versions 11 and 12 (prior to patched builds).

[Impact] Unauthenticated remote attackers can obtain encrypted credentials stored in the configuration database, potentially gaining full access to backup infrastructure hosts.

[Mitigation] Apply the official security patches immediately, or restrict access to the Veeam Backup Service port (TCP 9401) using firewall rules.

[Affected Scope] Fortinet FortiOS versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.9, and prior to 6.4.11

[Impact] A privileged attacker can read and write arbitrary files on the underlying Linux system via crafted CLI commands, potentially leading to firmware tampering and persistent backdoor installation

[Mitigation] Immediately upgrade to the official patched versions (7.2.4, 7.0.10, 6.4.11 or higher)

[Affected Scope] Browsers and applications utilizing WebKit and WebKitGTK engines prior to WSA-2019-0005

[Impact] Processing maliciously crafted web content can trigger memory corruption (CWE-119), potentially leading to arbitrary remote code execution (RCE)

[Mitigation] Upgrade WebKitGTK packages to the latest stable release and restrict access to untrusted web domains

[Affected Scope] Apple devices running iOS versions prior to 16.3.1, iPadOS versions prior to 16.3.1, macOS Ventura versions prior to 13.2.1, and Safari versions prior to 16.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE). This vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a specially crafted API request

[Mitigation] Immediately upgrade to IBM Aspera Faspex 4.4.2 Patch Level 2 or later, or restrict access to the obsolete API endpoints

[Affected Scope] Joomla! versions 4.0.0 through 4.2.7

[Impact] Unauthenticated remote attackers can bypass access controls to access sensitive API endpoints, exposing database credentials and system configuration details

[Mitigation] Immediately upgrade Joomla! to the patched version (4.2.8 or higher) and rotate all database credentials

[Affected Scope] All Windows systems utilizing the Windows Graphics component, including Windows 10, Windows 11, and Windows Server 2008-2022

[Impact] Local attackers can exploit an integer overflow (CWE-190) to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft security updates immediately and ensure Windows Graphics-related Store apps are updated to their latest versions

[Affected Scope] Microsoft Windows operating systems including Windows 10, 11, and Windows Server 2016, 2019, 2022 utilizing the CLFS driver

[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft cumulative security updates (February 2023 Patch Tuesday) and monitor unpatched assets

[Affected Scope] Microsoft Office and Microsoft Publisher 2013, 2016, 2019, 2021, and Microsoft 365 Apps

[Impact] Attackers can bypass Office macro blocking policies (Mark of the Web) via specially crafted Publisher files to execute arbitrary code

[Mitigation] Apply official Microsoft security patches immediately and enforce registry policies to disable Publisher macros

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019

[Impact] An authenticated attacker can execute arbitrary commands with SYSTEM privileges and fully compromise the server by sending specially crafted serialized data

[Mitigation] Immediately apply the latest Cumulative Updates (CU) and Security Updates (SU) provided by Microsoft