CVE Vulnerability Advisory Database

[Affected Scope] Check Point Management Server (R80.x, R81.x series)

[Impact] Unauthenticated attackers can upload and execute arbitrary scripts via directory traversal, leading to full system compromise.

[Mitigation] Apply the vendor-provided emergency hotfix and restrict management interface access from the public internet.

[Affected Scope] Systems running VMware vCenter Server with the built-in Syslog server service enabled.

[Impact] A remote, unauthenticated attacker with network access can exploit this directory traversal vulnerability to execute arbitrary code and fully compromise the vCenter Server.

[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict network access to Syslog ports (UDP/TCP 514).

[Affected Scope] Trend Micro Apex One (On-Premise) server installations.

[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.

[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.

[Affected Scope] Users of unpatched RARLAB WinRAR installations

[Impact] Remote attackers can execute arbitrary code in the context of the current user by tricking them into opening a crafted archive file, leading to directory traversal and unauthorized file creation

[Mitigation] Immediately upgrade WinRAR to the latest secure version and avoid extracting archives from untrusted sources

[Affected Scope] Output Messenger versions prior to 2.0.63

[Impact] Authenticated attackers can leverage directory traversal sequences ('../') to access sensitive configuration files and arbitrary system files, potentially leading to remote code execution (RCE)

[Mitigation] Immediately upgrade Output Messenger to the latest secure version (2.0.63 or higher) and restrict network access

[Affected Scope] Mitel MiCollab through 9.8 SP2

[Impact] An authenticated attacker with administrative privileges can exploit insufficient input sanitization to read arbitrary non-sensitive local system files

[Mitigation] Apply the official security patches or upgrade to the latest supported version immediately

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series running firmware versions V5.00 through V5.38

[Impact] Unauthenticated remote attackers can download or upload arbitrary files via crafted URLs, potentially leading to full system compromise and remote code execution

[Mitigation] Immediately upgrade to firmware version V5.39 or later, and restrict external access to the web management interface

[Affected Scope] SolarWinds Serv-U FTP Server versions 15.4.2 Hotfix 1 and prior

[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read sensitive host system and configuration files

[Mitigation] Immediately upgrade to SolarWinds Serv-U version 15.4.2 Hotfix 2 or later

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] Unauthenticated attackers can bypass authentication, upload malicious ZIP archives, and exploit directory traversal to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches and restrict external access to the mboximport endpoint

[Affected Scope] dotCMS versions 3.0 through 22.02

[Impact] Unauthenticated attackers can upload malicious JSP files via directory traversal when anonymous content creation is enabled, leading to full Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to patched dotCMS versions (22.03 or higher) and disable anonymous content creation APIs if not required

[Affected Scope] RARLAB UnRAR utility versions prior to 6.12 on Linux and UNIX platforms.

[Impact] Attackers can exploit this vulnerability to write arbitrary files outside the extraction directory, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade UnRAR to version 6.12 or later, and apply security patches to integrated applications like Zimbra.

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] An authenticated administrator can upload a malicious ZIP archive to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches (9.0.0 Patch 24 / 8.8.15 Patch 31 or later)

[Affected Scope] WSO2 API Manager (2.2.0 to 4.0.0), Identity Server (5.2.0 to 5.11.0), Enterprise Integrator (6.2.0 to 6.6.0), and other major WSO2 products

[Impact] Unauthenticated attackers can upload and execute arbitrary JSP files via a crafted HTTP request, leading to complete system compromise

[Mitigation] Apply official WSO2 security patches immediately, restrict external access to the '/fileupload' endpoint, and disable execution permissions in web root subdirectories

[Affected Scope] On-premise Grafana installations running versions 8.0.0-beta1 through 8.3.0 (excluding Grafana Cloud)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read sensitive local system and configuration files

[Mitigation] Immediately upgrade to patched versions (8.0.7, 8.1.8, 8.2.7, or 8.3.1+) or block the vulnerable URL path via reverse proxy

[Affected Scope] Metabase versions prior to 0.40.5 and 1.40.5 (including all 0.40.x and 1.40.x releases below these versions)

[Impact] Unauthenticated remote attackers can exploit directory traversal to read arbitrary system files and environment variables from the server

[Mitigation] Immediately upgrade to patched Metabase versions (0.40.5, 1.40.5 or later) or block the vulnerable API path using a reverse proxy or WAF

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges via directory traversal

[Mitigation] Immediately upgrade VigorConnect to the latest patched version (1.6.0-RC1 or higher) and restrict access to the management interface

[Affected Scope] DrayTek VigorConnect version 1.6.0-B3 and prior

[Impact] Unauthenticated remote attackers can download arbitrary system files with root privileges, leading to full exposure of sensitive host operating system data

[Mitigation] Immediately upgrade VigorConnect to the latest secure version and restrict access to the management interface from the public internet

[Affected Scope] Aviatrix Controller 6.x versions prior to 6.5-1804.1922

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting directory traversal and unrestricted file upload vulnerabilities

[Mitigation] Immediately upgrade Aviatrix Controller to version 6.5-1804.1922 or later, and restrict external access to the management interface

[Affected Scope] SonicWall Email Security version 10.0.9.x.

[Impact] A post-authenticated attacker can exploit directory traversal to read arbitrary files on the remote host, potentially exposing sensitive system configurations and credentials.

[Mitigation] Immediately upgrade to the patched version (10.0.9.6173 or higher) as recommended by the vendor.

[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)

[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.

[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.