CVE Vulnerability Advisory Database

[Affected Scope] SAP NetWeaver AS ABAP, AS Java, ABAP Platform, SAP Content Server 7.53, and SAP Web Dispatcher

[Impact] Unauthenticated attackers can prepend arbitrary data to a victim's request, enabling session hijacking, cache poisoning, and complete compromise of system Confidentiality, Integrity, and Availability

[Mitigation] Immediately apply the official SAP security patches (SAP Note 3123396) and restrict anomalous HTTP request headers at the reverse proxy or WAF level

[Affected Scope] Windows and Windows Server operating systems running the Windows Print Spooler service

[Impact] A locally authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable the Print Spooler service on non-printing servers

[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with active Print Spooler service

[Impact] Local attackers can exploit directory traversal and symbolic link creation to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Apply the official Microsoft security updates immediately, or disable the Print Spooler service on non-printing servers and Domain Controllers

[Affected Scope] Microsoft Windows operating systems utilizing Windows Runtime (WinRT), including Windows 10, Windows 11, and Windows Server 2016/2019/2022

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a specially crafted file

[Mitigation] Apply the official Microsoft Cumulative Updates immediately and restrict execution of untrusted files

[Affected Scope] Almost all major Linux distributions (RedHat, Debian, Ubuntu, SUSE, etc.) with the Polkit (formerly PolicyKit) pkexec utility installed.

[Impact] A local unprivileged attacker can exploit the vulnerable pkexec binary to bypass authorization policies and gain full root administrative privileges on the target host.

[Mitigation] Apply official vendor security patches immediately, or remove the SUID permission (chmod 0755) from the pkexec binary as a temporary workaround.

[Affected Scope] Reolink RLC-410W smart IP camera firmware version v3.0.0.136_20121102 and prior

[Impact] An authenticated attacker can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise

[Mitigation] Immediately update to the latest official secure firmware and restrict external access to the camera management interface

[Affected Scope] Linux Kernel environments prior to specific patched versions

[Impact] A local attacker can trigger a double free via crafted system calls, leading to kernel memory corruption, Denial of Service (DoS), or local privilege escalation to root.

[Mitigation] Upgrade the Linux kernel to the latest distribution package or rebuild with upstream commit ec6af094ea28.

[Affected Scope] Oracle Access Manager within Oracle Fusion Middleware, versions 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can gain full control of the Oracle Access Manager system and execute arbitrary code via HTTP network access

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external access to OpenSSO Agent endpoints

[Affected Scope] NUUO NVRmini2 firmware versions up to and including 3.11.

[Impact] Unauthenticated attackers can add arbitrary users and, when chained with CVE-2011-5325, overwrite files under the web root to execute arbitrary code as root.

[Mitigation] Immediately restrict external access to the device, apply the latest firmware updates, or implement strict access control lists.

[Affected Scope] Most Windows client and server operating systems, including Windows 10, 11, and Windows Server 2008 through 2022

[Impact] A locally authenticated attacker can exploit a symbolic link vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise

[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local logon privileges in multi-user environments

[Affected Scope] Samsung mobile devices running NPU (Neural Processing Unit) driver prior to SMR Jan-2022 Release 1

[Impact] Local attackers can exploit improper handling of exceptional conditions to perform arbitrary memory writes and execute code with kernel privileges

[Mitigation] Apply the official Samsung security update to upgrade the system firmware to January 2022 or later

[Affected Scope] Acclaim Systems USAHERDS through version 7.4.0.1

[Impact] Attackers can exploit hard-coded credentials to bypass authentication and achieve remote code execution (RCE)

[Mitigation] Immediately upgrade to the patched version and restrict external network access to the application

[Affected Scope] VMware Workspace ONE UEM console versions 20.0.8 (prior to 20.0.8.37), 20.11.0 (prior to 20.11.0.40), 21.2.0 (prior to 21.2.0.27), and 21.5.0 (prior to 21.5.0.37).

[Impact] An unauthenticated remote attacker with network access to the UEM console can send crafted requests to access sensitive internal resources and information.

[Mitigation] Apply the official cumulative patches immediately or implement IIS URL Rewrite rules to block external access to the vulnerable endpoints.

[Affected Scope] Android kernel and upstream Linux kernel integrated into mobile devices and embedded systems

[Impact] Local attackers can corrupt kernel memory and escalate privileges to Root without requiring any user interaction or additional execution privileges

[Mitigation] Apply the Android November 2021 Security Bulletin patch or upgrade to the patched upstream Linux kernel version

[Affected Scope] Android kernel and Linux kernel implementations of AF_UNIX sockets

[Impact] Local attackers can exploit this to gain System execution privileges without any user interaction, leading to full device compromise

[Mitigation] Apply the Android November 2021 security patch or update to the latest upstream Linux kernel version

[Affected Scope] All Windows systems utilizing the Common Log File System (CLFS.sys) driver, including Windows 10, 11, and Windows Server editions.

[Impact] A local attacker can execute arbitrary code in kernel mode via a specially crafted application, leading to complete SYSTEM privilege escalation.

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor for unauthorized local process executions and anomalous CLFS log creations.

[Affected Scope] Apache Log4j versions 2.0-beta9 to 2.15.0 (including 2.15.0 for Java 8 and 2.12.1 or below for Java 7)

[Impact] Attackers can exploit JNDI Lookup patterns via Thread Context Map (MDC) inputs in non-default configurations to achieve remote code execution (RCE) or information leakage

[Mitigation] Immediately upgrade Apache Log4j to version 2.16.0 (for Java 8+) or 2.12.2 (for Java 7+), which disables JNDI by default and removes message lookup support

[Affected Scope] GitLab CE/EE versions 10.5 before 14.3.6, 14.4 before 14.4.4, and 14.5 before 14.5.2

[Impact] Unauthorized external attackers can perform Server-Side Request Forgery (SSRF) via the CI Lint API to access internal network resources and extract sensitive data

[Mitigation] Immediately upgrade GitLab instances to patched versions (14.3.6, 14.4.4, 14.5.2 or later) and restrict external access to the CI Lint API

[Affected Scope] Ivanti Endpoint Manager Cloud Services Appliance (CSA) versions 4.5 and 4.6

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with limited privileges ('nobody') by sending specially crafted HTTP requests.

[Mitigation] Immediately apply the official security patches provided by Ivanti and restrict access to the CSA management interface from the public internet.

[Affected Scope] On-premise Grafana installations running versions 8.0.0-beta1 through 8.3.0 (excluding Grafana Cloud)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read sensitive local system and configuration files

[Mitigation] Immediately upgrade to patched versions (8.0.7, 8.1.8, 8.2.7, or 8.3.1+) or block the vulnerable URL path via reverse proxy