CVE Vulnerability Advisory Database

[Affected Scope] All versions of the ajaxpro.2 (Ajax.NET Professional) package

[Impact] Unauthenticated remote attackers can exploit the deserialization of untrusted data to instantiate arbitrary .NET classes, leading to Remote Code Execution (RCE)

[Mitigation] Apply the official security patch from the upstream repository, restrict unused AjaxPro handlers, or deploy WAF rules

[Affected Scope] Roundcube versions before 1.3.17 and 1.4.x versions before 1.4.12

[Impact] Unauthenticated attackers can manipulate search parameters to extract sensitive database information or potentially achieve remote code execution (RCE)

[Mitigation] Immediately upgrade Roundcube to the latest stable releases (1.3.17, 1.4.12, or higher)

[Affected Scope] Metabase versions prior to 0.40.5 and 1.40.5 (including all 0.40.x and 1.40.x releases below these versions)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files and environment variables from the server

[Mitigation] Immediately upgrade to patched Metabase versions (0.40.5, 1.40.5 or later) or block the vulnerable API path using a reverse proxy or WAF

[Affected Scope] Windows Server systems configured as Active Directory Domain Controllers (DCs).

[Impact] A standard domain user can exploit Kerberos name resolution flaws to impersonate a Domain Controller computer account, escalating privileges to Domain Admin and compromising the entire AD forest.

[Mitigation] Apply the latest Microsoft cumulative security updates to all Domain Controllers and enforce Kerberos validation hardening via registry configurations.

[Affected Scope] All Windows Server Domain Controllers (from 2008 to 2022) running Active Directory Domain Services (AD DS)

[Impact] A standard domain user can spoof a Domain Controller's computer account name, escalate privileges to Domain Admin, and achieve full domain compromise

[Mitigation] Apply the latest Microsoft cumulative security updates and ensure the KB5008380 registry settings are transitioned to Enforcement mode

[Affected Scope] Microsoft Windows operating systems, including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022

[Impact] A local authenticated attacker can exploit improper link resolution in the Windows Installer service to delete or manipulate arbitrary files with SYSTEM privileges, potentially leading to full local privilege escalation

[Mitigation] Apply the official cumulative security updates provided by Microsoft immediately, or restrict Windows Installer execution for non-administrative users as a temporary workaround

[Affected Scope] Sitecore Experience Platform (XP) 7.5 Initial Release to Sitecore XP 8.2 Update-7.

[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges on the hosting server by sending specially crafted serialized payloads.

[Mitigation] Apply official security patches immediately or restrict external access to the vulnerable '/sitecore/shell/ClientBin/Reporting/ReportService.asmx' endpoint.

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges via directory traversal

[Mitigation] Immediately upgrade VigorConnect to the latest patched version (1.6.0-RC1 or higher) and restrict access to the management interface

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges, leading to full exposure of sensitive host operating system data

[Mitigation] Immediately upgrade VigorConnect to the latest secure version and restrict access to the management interface from the public internet

[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10, Windows 11, and Windows Server 2016/2019/2022

[Impact] A local attacker with low privileges can execute arbitrary code in kernel mode, leading to complete system takeover (SYSTEM privileges)

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (LCU) and restrict local interactive access on unpatched assets

[Affected Scope] Microsoft Windows operating systems utilizing the Win32k kernel driver, including Windows 10, Windows 11, and Windows Server 2016/2019/2022.

[Impact] A local authenticated attacker can execute arbitrary code in kernel mode and elevate privileges to SYSTEM by running a specially crafted application.

[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict local execution privileges on unpatched systems.

[Affected Scope] Samsung mobile devices and Exynos modem-powered hardware running firmware versions prior to SMR (Security Maintenance Release) Oct-2021 Release 1

[Impact] Local attackers with radio permissions can exploit missing input validation and a format string bug to trigger kernel panic and system-wide Denial of Service (DoS)

[Mitigation] Apply the Samsung SMR October 2021 Release 1 (or later) firmware update immediately and restrict unauthorized applications from acquiring radio permissions

[Affected Scope] Samsung mobile devices and Exynos modem interface drivers prior to SMR Oct-2021 Release 1

[Impact] Local attackers can execute arbitrary code with kernel privileges by dereferencing an invalid function pointer, leading to complete system compromise

[Mitigation] Immediately apply the official Samsung Android security update (October 2021 or later)

[Affected Scope] Grafana versions prior to 8.1.6 and 7.5.11

[Impact] Unauthenticated attackers can view or delete the snapshot with the lowest database key via specific API paths, potentially leading to complete snapshot data harvesting and loss.

[Mitigation] Immediately upgrade Grafana to patched versions (8.1.6, 7.5.11, or higher) or block access to the vulnerable API paths using a reverse proxy.

[Affected Scope] SonicWall SMA 100 series firmware versions 10.2.1.1-29sv and earlier, 10.2.0.8-37sv and earlier, and 9.0.0.11-31sv and earlier

[Impact] A remote authenticated attacker can inject arbitrary commands via the management interface, executing code as the 'nobody' user and potentially causing a Denial of Service (DoS)

[Mitigation] Immediately upgrade the SMA 100 firmware to the latest patched versions (e.g., 10.2.1.2-34sv or higher) as recommended by the vendor

[Affected Scope] D-Link DIR-605 B2 Firmware Version 2.01MT and prior

[Impact] Unauthenticated remote attackers can retrieve plaintext administrator credentials by sending a forged POST request to the /getcfg.php page

[Mitigation] Immediately decommission and replace the legacy EOL device, or disable remote WAN management and restrict network access

[Affected Scope] Citrix ShareFile Storage Zones Controller versions prior to 5.11.20

[Impact] Unauthenticated remote attackers can bypass access controls to compromise the storage zones controller, potentially leading to arbitrary code execution and data exfiltration

[Mitigation] Immediately upgrade to Citrix ShareFile Storage Zones Controller 5.11.20 or later, and restrict external access to administrative endpoints

[Affected Scope] Delta Electronics DOPSoft 2 (Version 2.00.07 and prior)

[Impact] Successful exploitation allows an attacker to execute arbitrary code within the context of the active process by tricking a user into opening a malicious project file

[Mitigation] Upgrade to the latest secure version of DOPSoft and restrict opening unverified project files (.dp2) from untrusted sources

[Affected Scope] Certain Dahua IP cameras, NVRs, XVRs, and thermal cameras

[Impact] Attackers can bypass identity authentication during the login process by sending crafted malicious packets, gaining full administrative control

[Mitigation] Immediately apply the latest firmware updates from the vendor and restrict direct internet access to the devices

[Affected Scope] Certain Dahua IP cameras, NVRs, DVRs, and associated firmware versions

[Impact] Attackers can completely bypass the identity authentication process during login and gain full administrative control of the device

[Mitigation] Immediately apply the latest firmware updates provided by the vendor and restrict external network access to the devices