CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WinRAR Arbitrary Code Execution Vulnerability (CVE-2023-38831) Security Advisory
[Affected Scope] All Windows endpoint environments running RARLAB WinRAR versions prior to 6.23.
[Impact] Attackers can execute arbitrary code in the background when a user attempts to open a seemingly benign file within a crafted ZIP archive, leading to full system compromise.
[Mitigation] Immediately upgrade WinRAR to version 6.23 or higher, and restrict execution of untrusted archive files.
Trend Micro Apex Central Arbitrary File Upload and Remote Code Execution (RCE) Vulnerability (CVE-2022-26871) Analysis and Mitigation Guide
[Affected Scope] Trend Micro Apex Central On-Premise deployments (SaaS deployments are unaffected)
[Impact] Unauthenticated remote attackers can upload malicious web shells to execute arbitrary commands with system privileges, leading to complete infrastructure compromise
[Mitigation] Immediately apply the official hotfixes/patches provided by Trend Micro and restrict external access to the management console