CVE Vulnerability Advisory Database

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)

[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles

[Affected Scope] Craft CMS 4.x (prior to 4.13.8) and 5.x (prior to 5.5.8) installations where the security key has been compromised

[Impact] Attackers can leverage the compromised security key to forge serialized payloads, leading to arbitrary Remote Code Execution (RCE) on the host server

[Mitigation] Immediately upgrade Craft CMS to version 4.13.8 or 5.5.8 (or higher) and rotate the CRAFT_SECURITY_KEY

[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.

[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.

[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.

[Affected Scope] Aviatrix Controller versions prior to 7.1.4191 and 7.2.x versions prior to 7.2.4996

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by injecting shell metacharacters, leading to complete system compromise

[Mitigation] Immediately upgrade Aviatrix Controller to patched versions (7.1.4191, 7.2.4996 or higher) and restrict access to the management interface

[Affected Scope] DrayTek Vigor2960 and Vigor300B gateway devices running firmware version 1.5.1.4 or prior

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges via the Web Management Interface, leading to full system compromise

[Mitigation] Immediately upgrade to firmware version 1.5.1.5 or higher and disable WAN-side web management access

[Affected Scope] Craft CMS versions 3.x, 4.x, and 5.x running on environments where 'register_argc_argv' is enabled in php.ini

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system control by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Craft CMS to patched versions (3.9.14, 4.13.2, or 5.5.2 or higher) and disable 'register_argc_argv' in php.ini

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)

[Impact] An attacker with administrative privileges can inject arbitrary OS commands and execute them with site user privileges

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (Advisory BT24-11)

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions

[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24

[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series running firmware versions V5.00 through V5.38

[Impact] Unauthenticated remote attackers can download or upload arbitrary files via crafted URLs, potentially leading to full system compromise and remote code execution

[Mitigation] Immediately upgrade to firmware version V5.39 or later, and restrict external access to the web management interface

[Affected Scope] Citrix Session Recording servers accessible to authenticated users on the same intranet

[Impact] Limited remote code execution (RCE) under the context of the NetworkService account, potentially leading to lateral movement

[Mitigation] Apply official Citrix security patches immediately and restrict network access to the Session Recording infrastructure

[Affected Scope] CyberPanel versions through 2.3.6 and unpatched 2.3.7

[Impact] Remote attackers can bypass authentication and execute arbitrary system commands with root privileges

[Mitigation] Immediately upgrade CyberPanel to the latest secure commit (5b08cd6 or later) and restrict access to the management port

[Affected Scope] CyberPanel versions through 2.3.6 and unpatched 2.3.7

[Impact] Remote attackers can bypass authentication and execute arbitrary system commands with root privileges via shell metacharacters

[Mitigation] Immediately upgrade CyberPanel to the latest commit (1c0c6cb or later) and restrict access to the management port

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.21

[Impact] Unauthenticated remote attackers can upload and download arbitrary files, potentially leading to full Remote Code Execution (RCE) on the target server

[Mitigation] Immediately upgrade to version 5.8.0.21 or later, and restrict external access to the file transfer interfaces

[Affected Scope] Multiple versions of FortiManager and FortiManager Cloud (7.6.0, 7.4.0-7.4.4, 7.2.0-7.2.7, 7.0.0-7.0.12, 6.4.0-6.4.14, 6.2.0-6.2.12, etc.)

[Impact] An unauthenticated remote attacker can execute arbitrary code or system commands via specially crafted requests, potentially leading to full system compromise

[Mitigation] Immediately upgrade to the official patched versions or apply workarounds to restrict unauthorized FGFM connections

[Affected Scope] NuPoint Unified Messaging (NPM) component within Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201)

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to perform path traversal, allowing unauthorized access to view, corrupt, or delete user data and system configurations

[Mitigation] Immediately upgrade to the latest patched version provided by the vendor, and restrict external access to management interfaces

[Affected Scope] ScienceLogic SL1 (formerly EM7) versions prior to 12.1.3, 12.2.3, and 12.3, including older lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x

[Impact] Unauthenticated remote attackers can exploit an unspecified third-party component packaged with SL1 to execute arbitrary commands and gain full system control

[Mitigation] Immediately upgrade to patched SL1 versions (12.1.3+, 12.2.3+, 12.3+) or apply the corresponding hotfixes for your specific version line

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] Microsoft Windows operating systems utilizing Microsoft Management Console (MMC) and .msc console files

[Impact] Successful exploitation allows an attacker to execute arbitrary code with the privileges of the active user by tricking them into opening a crafted .msc file

[Mitigation] Apply the official Microsoft security updates immediately and restrict the execution of untrusted .msc files

[Affected Scope] All supported versions of Microsoft Configuration Manager (formerly SCCM)

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the target server and backend database by sending specially crafted requests, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative updates (KB) via the Configuration Manager console and restrict database access