CVE Vulnerability Advisory Database

[Affected Scope] Ruckus Wireless Admin and AP controller devices running version 10.4 or lower

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP GET request

[Mitigation] Immediately apply the official vendor firmware patches and restrict access to the management interface from the public internet

[Affected Scope] TerraMaster NAS devices running TOS (TerraMaster Operating System) version 4.2.29 and earlier

[Impact] Unauthenticated remote attackers can retrieve the administrator password hash or plaintext by sending a crafted HTTP request, leading to complete device compromise

[Mitigation] Immediately upgrade TOS to the latest secure version (4.2.30 or higher) and restrict external internet access to the NAS management interface

[Affected Scope] Fortra (formerly HelpSystems) GoAnywhere MFT versions prior to 7.1.2

[Impact] An unauthenticated remote attacker can execute arbitrary system commands on the target server by sending a malicious serialized object to the License Response Servlet.

[Mitigation] Immediately upgrade GoAnywhere MFT to version 7.1.2 or higher, and restrict external access to the administrator console port (9006).

[Affected Scope] Systems running Linux Kernel utilizing the ALSA (Advanced Linux Sound Architecture) PCM subsystem

[Impact] A local attacker can trigger a Use-After-Free (UAF) condition to corrupt kernel memory, leading to complete system compromise with Ring 0 privileges

[Mitigation] Upgrade the Linux kernel past commit 56b88b50565cd8b946a2d00b0c83927b7ebb055e, or blacklist the vulnerable sound modules

[Affected Scope] Adobe Acrobat and Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier), and 20.005.30418 (and earlier)

[Impact] Successful exploitation could lead to arbitrary code execution in the context of the current user when a victim opens a crafted malicious PDF

[Mitigation] Immediately apply the official Adobe security patches to upgrade to the latest secure versions

[Affected Scope] Zoho ManageEngine on-premise products with SAML SSO configured or previously enabled (e.g., ServiceDesk Plus through 14003, ADSelfService Plus through 6210, Endpoint Central through 10.1.2228.10)

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending a specially crafted SAML response containing malicious XSLT payloads

[Mitigation] Immediately upgrade the affected ManageEngine products to the latest patched versions, or temporarily disable SAML SSO and restrict access to SAML endpoints

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can compromise the server via T3/IIOP protocols, leading to unauthorized access to sensitive data or potential Remote Code Execution (RCE)

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to T3/IIOP protocols (typically port 7001)

[Affected Scope] SugarCRM versions prior to 12.0 without Hotfix 91155

[Impact] Authenticated attackers can inject arbitrary PHP code through crafted requests in the EmailTemplates module, leading to full remote code execution

[Mitigation] Apply SugarCRM Hotfix 91155 immediately or upgrade to version 12.0 or later

[Affected Scope] Microsoft Windows operating systems including Windows 10, Windows 11, and Windows Server 2016/2019/2022 utilizing the ALPC mechanism

[Impact] Successful exploitation allows a local attacker to bypass sandbox environments, elevate privileges to SYSTEM, and execute arbitrary code to fully compromise the host

[Mitigation] Immediately apply the official Microsoft cumulative security updates released in January 2023 or later

[Affected Scope] CentOS Web Panel (CWP) 7 versions prior to 0.9.8.1147

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target server by injecting shell metacharacters into the login parameter.

[Mitigation] Immediately upgrade CWP 7 to version 0.9.8.1147 or later, and restrict access to the management ports using firewalls.

[Affected Scope] FortiOS versions 7.2.0 to 7.2.2, 7.0.0 to 7.0.8, 6.4.0 to 6.4.10, 6.2.0 to 6.2.11, 6.0.15 and earlier; FortiProxy versions 7.2.0 to 7.2.1, 7.0.7 and earlier

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target system by sending specifically crafted HTTP/HTTPS requests

[Mitigation] Immediately upgrade to the patched firmware versions or disable the SSL-VPN service and restrict access using local-in policies if patching is delayed

[Affected Scope] Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0

[Impact] Attackers can trigger a Use-After-Free (UAF) condition via crafted web content, leading to arbitrary code execution and a complete sandbox escape on the host OS

[Mitigation] Immediately update all affected Mozilla products to their respective patched versions (Firefox 97.0.2+, Firefox ESR 91.6.1+, Thunderbird 91.6.2+, etc.)

[Affected Scope] Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0

[Impact] Remote attackers can trigger memory corruption via a crafted XSLT stylesheet to execute arbitrary code on the target system, with active exploitation reported in the wild

[Mitigation] Immediately update all affected Mozilla products to their respective patched versions (Firefox 97.0.2+, Firefox ESR 91.6.1+, Thunderbird 91.6.2+, etc.)

[Affected Scope] Apple WebKit engine in Safari prior to 16.2, tvOS prior to 16.2, macOS Ventura prior to 13.1, iOS prior to 15.7.2/16.1.2, and iPadOS prior to 15.7.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target system, with active exploitation observed in the wild

[Mitigation] Immediately update affected Apple operating systems and Safari browsers to the latest patched versions (iOS 16.2, macOS 13.1, or later)

[Affected Scope] Windows 10, 11, and Windows Server 2016, 2019, 2022

[Impact] Attackers can bypass Windows SmartScreen and Mark of the Web (MotW) warnings, leading to unauthorized execution of malicious files without user alerts

[Mitigation] Apply the latest Microsoft Cumulative Updates immediately and enforce strict SmartScreen policies via GPO

[Affected Scope] Citrix ADC and Citrix Gateway versions 12.1 and 13.0 with SAML SP or IdP configuration enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code on the target appliance and gain full system control by sending specially crafted requests

[Mitigation] Immediately upgrade to the patched firmware versions (12.1-65.25, 13.0-88.16, or higher) provided by Citrix

[Affected Scope] Cacti versions 1.2.x up to 1.2.22, and 1.3.x development branches

[Impact] Unauthenticated remote attackers can bypass authentication via HTTP header manipulation and execute arbitrary OS commands with the privileges of the web server

[Mitigation] Immediately upgrade Cacti to version 1.2.23 or later, and restrict access to the monitoring interface

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 108.0.5359.94

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (108.0.5359.94 or higher)

[Affected Scope] D-Link DNR-322L Cloud Network Video Recorder firmware versions 2.60B15 and prior

[Impact] An authenticated attacker can exploit the lack of data integrity verification in the backup configuration feature to execute arbitrary OS-level commands and fully compromise the device

[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the external network and migrate to a supported alternative

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)