CVE Vulnerability Advisory Database

[Affected Scope] Apache Flink versions 1.11.0, 1.11.1, and 1.11.2

[Impact] Unauthenticated remote attackers can read arbitrary files on the JobManager local filesystem via the REST interface

[Mitigation] Immediately upgrade to Apache Flink 1.11.3, 1.12.0, or later versions

[Affected Scope] Roundcube Webmail versions before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10

[Impact] Remote attackers can execute arbitrary JavaScript in the victim's browser session by sending a specially crafted plain text email, potentially leading to session hijacking

[Mitigation] Immediately upgrade Roundcube Webmail to version 1.2.13, 1.3.16, or 1.4.10 or higher

[Affected Scope] All Cyberoam Next-Generation Firewall (NGFW) appliances running Cyberoam OS released prior to 2020-12-04 with WebAdmin enabled

[Impact] Unauthenticated remote attackers can execute arbitrary SQL statements, bypass authentication, compromise the database, and gain full administrative control over the firewall appliance

[Mitigation] Apply the latest official Cyberoam OS security patches immediately and restrict external WAN access to the WebAdmin interface

[Affected Scope] PHP applications and CMS frameworks (such as Drupal) utilizing PEAR Archive_Tar versions 1.4.10 and below

[Impact] Remote attackers can bypass filename sanitization to write or overwrite arbitrary files on the system, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately upgrade the PEAR Archive_Tar package to version 1.4.11 or higher

[Affected Scope] QNAP QTS versions prior to 4.4.2.1231 Build 20200302, 4.4.1.1201 Build 20200130, 4.3.6.1218 Build 20200214, 4.3.4.1190 Build 20200107, 4.3.3.1161 Build 20200109, and 4.2.6 Build 20200109

[Impact] Remote attackers can inject malicious scripts into the web console, potentially leading to session hijacking or unauthorized administrative actions

[Mitigation] Immediately upgrade QTS to the patched versions recommended by QNAP and restrict external access to the management interface

[Affected Scope] QNAP QTS versions prior to 4.4.2.1231 Build 20200302, 4.4.1.1201 Build 20200130, 4.3.6.1218 Build 20200214, 4.3.4.1190 Build 20200107, 4.3.3.1161 Build 20200109, and 4.2.6 Build 20200109

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target NAS device, leading to complete system compromise

[Mitigation] Immediately upgrade QTS to the latest patched firmware version and restrict external internet access to the NAS management interface

[Affected Scope] QNAP NAS devices running QTS versions prior to 4.4.2.1270, 4.4.1.1261, 4.3.6.1263, 4.3.4.1282, 4.3.3.1252, and 4.2.6

[Impact] Remote authenticated attackers can inject malicious scripts, potentially leading to session hijacking, administrative privilege escalation, and unauthorized device control

[Mitigation] Immediately upgrade QTS firmware to the recommended patched versions and restrict external access to the NAS management interface

[Affected Scope] Apple iOS and iPadOS versions prior to 13.6, and macOS Catalina versions prior to 10.15.6

[Impact] A local attacker can exploit improper validation of environment variables to bypass security boundaries and view sensitive user information

[Mitigation] Immediately update affected devices to iOS/iPadOS 13.6, macOS Catalina 10.15.6, or later versions

[Affected Scope] Apple devices running iOS versions prior to 13.6, iPadOS versions prior to 13.6, and tvOS versions prior to 13.4.8

[Impact] A local application can exploit a memory corruption vulnerability to execute arbitrary code with kernel privileges

[Mitigation] Immediately update affected devices to iOS 13.6, iPadOS 13.6, tvOS 13.4.8 or later

[Affected Scope] SonicWall firewall appliances running SonicOS Gen 6 (prior to 6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv (prior to 6.5.4.v), and Gen 7 (prior to 7.0.0.0)

[Impact] An unauthenticated remote attacker can trigger a Denial of Service (DoS) or potentially execute arbitrary code with root privileges by sending a specially crafted HTTP request to the firewall

[Mitigation] Immediately upgrade to the patched firmware versions provided by SonicWall and restrict external access to the management interface

[Affected Scope] Sophos SG UTM versions prior to v9.705 MR5, v9.607 MR7, and v9.511 MR11 with WebAdmin enabled

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade to patched firmware versions (v9.705 MR5, v9.607 MR7, v9.511 MR11 or later) and restrict external access to WebAdmin (TCP 4444)

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Authenticated attackers can inject arbitrary system commands via the ddns_enc.cgi script, leading to complete device compromise and potential botnet recruitment.

[Mitigation] Apply the official firmware patches immediately, or isolate the devices from the public internet and restrict access to the management interface.

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.

[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.

[Affected Scope] TP-Link TL-WA855RE V5 devices running firmware version 20200415-rel37464 or earlier.

[Impact] An unauthenticated attacker on the same network can force a factory reset and reboot via a TDDP_RESET POST request, subsequently gaining full administrative control by setting a new password.

[Mitigation] Apply the latest official firmware update from the manufacturer and restrict local network access to trusted hosts only.

[Affected Scope] Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier

[Impact] Successful exploitation of this Use-After-Free vulnerability allows remote attackers to execute arbitrary code in the context of the current user by tricking them into opening a specially crafted PDF file

[Mitigation] Immediately apply the official Adobe security patch (APSB20-48) and restrict opening PDF files from untrusted sources

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015

[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.

[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can exploit T3 or IIOP protocols to achieve complete takeover and execute arbitrary code on the target server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict/block T3 and IIOP protocol access using connection filters

[Affected Scope] D-Link DIR-610 devices (End-of-Life / Unsupported products)

[Impact] An authenticated attacker can execute arbitrary system commands with root privileges via the 'cmd' parameter to 'command.php', leading to full device compromise.

[Mitigation] Since this product is End-of-Life (EOL), no official patches are available. Immediate device replacement or strict access control is highly recommended.

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests

[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports