CVE Vulnerability Advisory Database

[Affected Scope] Systems and network devices running vulnerable versions of Cisco SD-WAN Software CLI

[Impact] An authenticated, local attacker can execute arbitrary commands with root privileges by running a maliciously crafted command

[Mitigation] Apply the official software updates provided by Cisco immediately, as there are no viable workarounds

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages

[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later

[Affected Scope] Google Chrome browser versions prior to 105.0.5195.52

[Impact] A remote attacker can potentially exploit heap corruption and execute arbitrary code via a crafted HTML page targeting the Network Service

[Mitigation] Immediately upgrade Google Chrome to the latest stable version (105.0.5195.52 or higher) and enforce auto-updates via enterprise group policies

[Affected Scope] Google Chrome on Android prior to version 104.0.5112.101

[Impact] Remote attackers can force arbitrary browsing to malicious websites via crafted HTML pages exploiting insufficient Intent validation

[Mitigation] Immediately update Google Chrome on Android to version 104.0.5112.101 or later

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0 running on Red Hat-based distributions (RHEL/CentOS) where the 'pax' utility is missing.

[Impact] Unauthenticated attackers can upload arbitrary files to the web root directory via a cpio path traversal loophole during amavis scanning, leading to full system compromise.

[Mitigation] Immediately install the 'pax' utility via the OS package manager or upgrade Zimbra to the latest patched version.

[Affected Scope] Sophos Firewall version v19.0 MR1 and older affecting User Portal and Webadmin interfaces

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the firewall device by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade to the latest firmware version (v19.0 MR2 or later) and disable WAN access to Webadmin and User Portal

[Affected Scope] HelpSystems Cobalt Strike through version 4.7 (specifically affecting the Teamserver component)

[Impact] A remote attacker can execute arbitrary HTML/JS code within the Cobalt Strike operator console by spoofing the username field in a beacon payload, potentially leading to session hijacking or information disclosure

[Mitigation] Immediately upgrade Cobalt Strike to the official patched version 4.7.1 or higher

[Affected Scope] Systems running macOS Big Sur prior to 11.7, macOS Monterey prior to 12.6, iOS/iPadOS prior to 15.7, and iOS prior to 16

[Impact] A local attacker can execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported

[Mitigation] Immediately apply the official security updates provided by Apple (macOS Monterey 12.6, Big Sur 11.7, iOS 15.7/16, iPadOS 15.7 or later)

[Affected Scope] Trend Micro Apex One and Apex One as a Service client agents

[Impact] An attacker with administrative console access can force clients to execute unverified rollback packages, leading to Remote Code Execution (RCE) with SYSTEM privileges

[Mitigation] Apply the official Trend Micro security patches (CP 11136 / SP1 CP 11046 or higher) and restrict access to the admin console

[Affected Scope] GLPI versions up to and including 10.0.2, specifically within the bundled htmLawed module

[Impact] Unauthenticated remote attackers can inject and execute arbitrary PHP code, leading to full system compromise

[Mitigation] Immediately upgrade GLPI to version 10.0.3 or higher, or delete the vulnerable test script (htmLawedTest.php)

[Affected Scope] Almost all active versions of Windows OS, including Windows 7, 8.1, 10, 11, and Windows Server 2008 through 2022.

[Impact] A local attacker can exploit this vulnerability to gain SYSTEM privileges, leading to complete compromise of the target system.

[Mitigation] Immediately apply the September 2022 Microsoft security updates and monitor unpatched assets for anomalous local execution.

[Affected Scope] QNAP Photo Station running on QTS 5.0.1, 5.0.0, 4.5.x, 4.3.6, 4.3.3, and 4.2.6

[Impact] Unauthenticated remote attackers can modify critical system files, potentially leading to complete device compromise

[Mitigation] Immediately update Photo Station to the patched versions (6.1.2, 6.0.22, 5.7.18, 5.4.15, 5.2.14 or later)

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] ZK Framework versions 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, 8.6.4.1, and prior

[Impact] Unauthenticated attackers can access sensitive system files and class resources via crafted POST requests, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade ZK Framework to patched versions (9.6.2, 9.6.0.2, 9.5.1.4, 9.0.1.3, 8.6.4.2 or later) and block suspicious AuUploader requests via WAF.

[Affected Scope] Atlassian Bitbucket Server and Data Center versions 7.0.0 up to 8.3.0 (excluding specific patched releases)

[Impact] Remote attackers with read permissions to a public or private repository can execute arbitrary OS commands via malicious HTTP requests

[Mitigation] Immediately upgrade Bitbucket instances to the official patched versions (7.6.17, 7.17.10, 7.21.4, 8.0.3, 8.1.3, 8.2.2, 8.3.1 or higher)

[Affected Scope] Apple iOS devices prior to 15.6.1, iPadOS devices prior to 15.6.1, and macOS Monterey prior to 12.5.1.

[Impact] A local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete system compromise. Active exploitation in the wild has been reported.

[Mitigation] Immediately apply the official security updates (iOS/iPadOS 15.6.1, macOS Monterey 12.5.1 or later) provided by Apple.

[Affected Scope] Apple devices running versions prior to iOS 15.6.1, iPadOS 15.6.1, macOS Monterey 12.5.1, and Safari 15.6.1

[Impact] Processing maliciously crafted web content may allow remote attackers to execute arbitrary code (RCE) and compromise the target system

[Mitigation] Immediately apply the official security patches provided by Apple (iOS 15.6.1, macOS 12.5.1, Safari 15.6.1 or later)

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] Unauthenticated attackers can bypass authentication, upload malicious ZIP archives, and exploit directory traversal to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches and restrict external access to the mboximport endpoint

[Affected Scope] Palo Alto Networks PAN-OS firewalls (PA-Series, VM-Series, CN-Series) configured with a URL filtering profile containing blocked categories assigned to a source zone with an external-facing interface.

[Impact] Remote attackers can abuse the firewall as a reflector and amplifier to launch high-volume TCP Reflected Denial-of-Service (RDoS) attacks against arbitrary targets, masking their identity.

[Mitigation] Apply official PAN-OS software updates immediately, or review and remove URL filtering profiles from security policies applied to external-facing source zones.

[Affected Scope] Microsoft Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 supporting the MSDT protocol

[Impact] Successful exploitation allows remote attackers to execute arbitrary code on the target system when a user opens a specially crafted '.diagcab' file

[Mitigation] Apply the official Microsoft security updates immediately, or disable the MSDT URL protocol handler as a temporary workaround