CVE Vulnerability Advisory Database

[Affected Scope] All endpoint systems running TrueConf Client versions prior to 8.5

[Impact] Attackers manipulating the update delivery path can inject tampered payloads, leading to arbitrary code execution under the updater's privilege context

[Mitigation] Immediately upgrade TrueConf Client to version 8.5 or later to enforce proper update verification

[Affected Scope] Notepad++ versions prior to 8.8.9 utilizing the WinGUp updater component.

[Impact] Attackers capable of intercepting or redirecting update traffic can bypass verification to deliver and execute arbitrary malicious installers under the user's privilege context.

[Mitigation] Immediately upgrade Notepad++ to version 8.8.9 or higher, or block updater outbound traffic as a temporary workaround.

[Affected Scope] D-Link DNR-322L Cloud Network Video Recorder firmware versions 2.60B15 and prior

[Impact] An authenticated attacker can exploit the lack of data integrity verification in the backup configuration feature to execute arbitrary OS-level commands and fully compromise the device

[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the external network and migrate to a supported alternative

[Affected Scope] FortiOS versions prior to 7.0.3 utilizing the 'execute restore src-vis' command

[Impact] A local authenticated attacker can download arbitrary files onto the device via specially crafted update packages, compromising system integrity

[Mitigation] Immediately upgrade FortiOS to version 7.0.3 or higher, and restrict local administrator CLI privileges