CVE Vulnerability Advisory Database

[Affected Scope] Apple iPhone and iPad devices running iOS/iPadOS versions prior to 15.8.4, 16.7.11, 17.7.5, or 18.3.1

[Impact] A physical attacker can disable USB Restricted Mode on a locked device, potentially allowing unauthorized data extraction and forensic access

[Mitigation] Immediately update all affected devices to iOS/iPadOS 15.8.4, 16.7.11, 17.7.5, 18.3.1 or later

[Affected Scope] Trimble Cityworks versions prior to 15.8.9 and Cityworks with Office Companion versions prior to 23.10

[Impact] Authenticated attackers can exploit a deserialization vulnerability (CWE-502) to execute arbitrary code with system privileges on the Microsoft IIS web server

[Mitigation] Immediately upgrade to patched versions (Cityworks 15.8.9+ or Office Companion 23.10+) and restrict IIS access controls

[Affected Scope] Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 and prior

[Impact] An authenticated attacker can execute arbitrary operating system (OS) commands with system privileges by sending a crafted HTTP POST request to the CGI program

[Mitigation] Since this is an end-of-life (EOL) legacy device, immediate hardware replacement or strict access control restricting WAN-side management access is highly recommended

[Affected Scope] Advantive VeraCore through version 2025.1.0 affecting the timeoutWarning.asp component

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via the PmSess1 parameter, leading to unauthorized data exposure

[Mitigation] Apply the official vendor security patch immediately, or implement WAF rules to block malicious payloads targeting the affected parameter

[Affected Scope] All unpatched installations of 7-Zip software

[Impact] When extracting files from a crafted archive, the Mark-of-the-Web (MotW) is not propagated, allowing arbitrary code execution under the current user context without security warnings

[Mitigation] Immediately upgrade 7-Zip to the latest patched version and monitor unpatched endpoint assets

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.

[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.

[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.

[Affected Scope] Windows Server and Desktop operating systems running Windows Hyper-V virtualization environments

[Impact] A local attacker with low privileges can exploit a Use-After-Free (UAF) vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete host compromise

[Mitigation] Immediately apply the February 2025 Microsoft Patch Tuesday security updates and restrict local access to virtualization hosts

[Affected Scope] Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update

[Impact] Remote unauthenticated attackers can exploit absolute path traversal to leak highly sensitive system information

[Mitigation] Immediately apply the official Ivanti security updates and restrict access to the EPM management interfaces

[Affected Scope] Ivanti EPM 2024 prior to the January 2025 Security Update, and EPM 2022 SU6 prior to the January 2025 Security Update

[Impact] A remote unauthenticated attacker can exploit an absolute path traversal vulnerability to leak highly sensitive system information and credentials

[Mitigation] Immediately apply the official Ivanti January 2025 Security Update and restrict access to the EPM management console

[Affected Scope] Palo Alto Networks PAN-OS software versions with the DNS Security feature enabled

[Impact] An unauthenticated remote attacker can send malicious packets through the data plane, causing the firewall to reboot. Repeated exploitation forces the device into maintenance mode, leading to a complete network outage

[Mitigation] Immediately upgrade PAN-OS to the patched versions recommended by the vendor, and review DNS Security profile configurations as a temporary measure

[Affected Scope] Craft CMS versions 3.x, 4.x, and 5.x running on environments where 'register_argc_argv' is enabled in php.ini

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system control by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Craft CMS to patched versions (3.9.14, 4.13.2, or 5.5.2 or higher) and disable 'register_argc_argv' in php.ini

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions

[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24

[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.

[Affected Scope] Windows 10, 11, and Windows Server systems utilizing the Common Log File System (CLFS) driver

[Impact] Local attackers can exploit this vulnerability to execute arbitrary code in kernel mode, escalating privileges to SYSTEM

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and restrict unauthorized creation of CLFS log (.blf) files

[Affected Scope] Systems running macOS Sequoia prior to 15.1.1, iOS/iPadOS prior to 18.1.1 and 17.7.2, and Safari prior to 18.1.1

[Impact] Processing maliciously crafted web content can trigger a Cross-Site Scripting (XSS) attack due to state management flaws, with active exploitation reported on Intel-based Mac systems

[Mitigation] Immediately apply the official software updates provided by Apple for macOS, iOS, iPadOS, and Safari

[Affected Scope] Apple devices running Safari prior to 18.1.1, iOS/iPadOS 17/18, macOS Sequoia, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution and complete device compromise

[Mitigation] Immediately apply the official security updates released by Apple (iOS 18.1.1, macOS 15.1.1, etc.)

[Affected Scope] Oracle Supply Chain - Oracle Agile PLM Framework version 9.3.6 (Software Development Kit, Process Extension component)

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to gain unauthorized access to critical data or complete access to all accessible data within the framework

[Mitigation] Immediately apply the official security patches provided by Oracle and restrict external HTTP/HTTPS access to the affected system

[Affected Scope] Citrix Session Recording servers accessible to authenticated users on the same intranet

[Impact] Limited remote code execution (RCE) under the context of the NetworkService account, potentially leading to lateral movement

[Mitigation] Apply official Citrix security patches immediately and restrict network access to the Session Recording infrastructure

[Affected Scope] All supported versions of Microsoft Windows and Windows Server operating systems

[Impact] Simple user interaction with a malicious file (such as right-clicking or selecting) triggers NTLM credential disclosure, enabling credential theft and NTLM Relay attacks

[Mitigation] Immediately apply the Microsoft November 2024 cumulative security updates and restrict outbound NTLM traffic via Group Policy and firewalls

[Affected Scope] Palo Alto Networks Expedition migration tool versions prior to 1.2.96

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands as root, leading to the exposure of PAN-OS firewall usernames, cleartext passwords, device configurations, and API keys

[Mitigation] Immediately upgrade Expedition to version 1.2.96 or later, and rotate all potentially exposed firewall credentials and API keys