CVE Vulnerability Advisory Database

[Affected Scope] Network devices and virtual appliances running Cisco Catalyst SD-WAN Software

[Impact] Attackers can bypass file system restrictions via vshell access to read sensitive underlying operating system information

[Mitigation] Apply the official Cisco security patches immediately and restrict vshell/CLI access privileges

[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4

[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information

[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)

[Affected Scope] Systems running Microsoft Windows operating systems utilizing the Desktop Windows Manager (DWM) component

[Impact] An authorized local attacker can disclose sensitive information from kernel or process memory, potentially facilitating subsequent privilege escalation

[Mitigation] Immediately apply the latest Microsoft cumulative security updates and restrict unauthorized local access on unpatched systems

[Affected Scope] Projects running Vite development server exposed to the network (via --host or server.host configuration) using versions prior to 6.2.4, 6.1.3, 6.0.13, 5.4.16, and 4.5.11

[Impact] Remote attackers can bypass access restrictions and retrieve sensitive source code or system files by appending crafted query parameters (?inline&import or ?raw?import) to requests

[Mitigation] Immediately upgrade Vite to the patched versions (6.2.4, 6.1.3, 6.0.13, 5.4.16, or 4.5.11) and disable unnecessary external host binding (--host)

[Affected Scope] Check Point Security Gateways connected to the internet with Remote Access VPN or Mobile Access Software Blades enabled

[Impact] Unauthenticated remote attackers can read sensitive system files (e.g., /etc/shadow, password hashes, configuration files), potentially leading to credential theft and full network compromise

[Mitigation] Immediately apply the official hotfix provided in Check Point Advisory sk182336, audit system logs for IoCs, and rotate all sensitive credentials

[Affected Scope] ownCloud graphapi app versions 0.2.0 to 0.2.0, and 0.3.0 to 0.3.0 (both containerized and non-containerized environments)

[Impact] Unauthenticated attackers can access a specific URL to execute phpinfo(), exposing sensitive environment variables including admin passwords, mail server credentials, and license keys

[Mitigation] Immediately upgrade the graphapi app to version 0.2.1 or 0.3.1 (or higher), and rotate all potentially exposed credentials

[Affected Scope] Android 13 operating system (Android-13, Android ID: A-251586912)

[Impact] Attackers can hide mandatory foreground service notifications without user interaction, enabling stealthy background execution and unauthorized local information disclosure

[Mitigation] Apply the official June 2023 (or later) Android security patch and restrict notification permissions for untrusted applications

[Affected Scope] MinIO distributed (cluster) deployments starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z

[Impact] Unauthenticated remote attackers can retrieve all system environment variables, including MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD, leading to complete compromise of the storage cluster

[Mitigation] Immediately upgrade MinIO to RELEASE.2023-03-20T20-16-18Z or later, and rotate all potentially exposed root credentials immediately

[Affected Scope] ZK Framework versions 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2, 8.6.4.1, and prior

[Impact] Unauthenticated attackers can access sensitive system files and class resources via crafted POST requests, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade ZK Framework to patched versions (9.6.2, 9.6.0.2, 9.5.1.4, 9.0.1.3, 8.6.4.2 or later) and block suspicious AuUploader requests via WAF.

[Affected Scope] Cisco IOS XR Software deployments with the Health Check RPM enabled

[Impact] Unauthenticated remote attackers can connect to the Redis instance inside the NOSi container, enabling them to write to the database, write arbitrary files to the container filesystem, and retrieve database information

[Mitigation] Apply official Cisco software updates, deactivate the unused Health Check RPM, or restrict access to TCP port 6379 using infrastructure ACLs

[Affected Scope] Metabase versions prior to 0.40.5 and 1.40.5 (including all 0.40.x and 1.40.x releases below these versions)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files and environment variables from the server

[Mitigation] Immediately upgrade to patched Metabase versions (0.40.5, 1.40.5 or later) or block the vulnerable API path using a reverse proxy or WAF

[Affected Scope] Samsung Android devices prior to SMR (Samsung Maintenance Release) March 2021 Release 1

[Impact] Local attackers can bypass critical kernel protections like KASLR by reading sensitive kernel memory addresses and structures from the improperly secured sec_log file

[Mitigation] Apply the official Samsung SMR March 2021 Release 1 (or later) firmware update immediately, or restrict access permissions to the debug log node

[Affected Scope] All versions of Micro Focus Access Manager prior to version 5.0

[Impact] Unauthenticated remote attackers can exploit the Advance Configuration vulnerability to leak sensitive system configuration and credentials

[Mitigation] Immediately upgrade to Micro Focus Access Manager version 5.0 or higher, and restrict external access to the administration interface

[Affected Scope] D-Link DCS-2530L (prior to 1.06.01 Hotfix) and DCS-2670L (through 2.02) IP camera devices.

[Impact] Unauthenticated remote attackers can retrieve administrator credentials in plaintext by directly accessing a vulnerable configuration endpoint, leading to complete device takeover.

[Mitigation] Apply the official firmware hotfix immediately, restrict access to the web management interface, and isolate the devices from the public internet.

[Affected Scope] Cisco ASA Software and Cisco FTD Software with AnyConnect VPN or WebVPN configurations enabled

[Impact] An unauthenticated, remote attacker can retrieve sensitive memory contents (such as user credentials and session tokens) by sending crafted HTTP GET requests

[Mitigation] Apply the official firmware patches provided by Cisco immediately, or restrict access to the web services interface if patching is delayed

[Affected Scope] Microsoft Windows operating systems including Windows 7, 8.1, 10 and Windows Server 2008, 2012, 2016, 2019 utilizing SMBv1/v2/v3 protocols

[Impact] An authenticated remote attacker can disclose sensitive kernel memory information by sending specially crafted SMB requests, potentially bypassing ASLR to facilitate remote code execution (RCE)

[Mitigation] Apply the official Microsoft cumulative security updates and completely disable the legacy SMBv1 protocol across the infrastructure

[Affected Scope] Microsoft Internet Explorer 11 running on various Windows operating system environments

[Impact] An attacker can remotely test and verify the presence of specific files on the local disk, gathering critical intelligence for multi-stage targeted attacks

[Mitigation] Apply the official Microsoft cumulative security updates or disable Internet Explorer in favor of modern secure browsers

[Affected Scope] TIBCO JasperReports Server versions up to and including 6.2.4, 6.3.0, 6.3.2, 6.3.3, 6.4.0, 6.4.2, and related Community/AWS/BPM editions

[Impact] Authenticated attackers can exploit Spring Web Flow parameter handling to gain unauthorized read-only access to sensitive web application configuration files, including database credentials

[Mitigation] Apply official security patches from TIBCO, upgrade to the latest stable release, or implement strict input validation and WAF rules to block path traversal patterns

[Affected Scope] Multiple NETGEAR router models including R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000

[Impact] Unauthenticated remote attackers (if remote management is enabled) or local attackers on LAN/WLAN can retrieve the plaintext administrator password

[Mitigation] Apply the latest official firmware updates immediately, or enable the 'Password Recovery' feature and disable remote management as a temporary workaround

[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0

[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests

[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only