CVE Vulnerability Advisory Database

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] All supported versions of Microsoft Configuration Manager (formerly SCCM)

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the target server and backend database by sending specially crafted requests, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative updates (KB) via the Configuration Manager console and restrict database access

[Affected Scope] Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the target server by sending specially crafted inputs to the postjournal service.

[Mitigation] Immediately upgrade Zimbra to the latest patched versions (8.8.15 P46, 9.0.0 P41, 10.0.9, 10.1.1 or later), or disable the postjournal service if not required.

[Affected Scope] Ivanti Cloud Services Appliance (CSA) versions prior to 4.6 Patch 519

[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to access restricted administrative endpoints, potentially leading to Remote Code Execution (RCE) when chained with other vulnerabilities

[Mitigation] Organizations utilizing Ivanti CSA 4.6 must immediately apply Patch 519 or migrate to the actively supported CSA 5.0, as the 4.6 branch has reached End-of-Life (EOL)

[Affected Scope] PTZOptics PT30X-SDI and PT30X-NDI camera devices running firmware versions prior to 6.3.40.

[Impact] Remote, unauthenticated attackers can bypass authentication by omitting the HTTP Authorization header, leading to the exposure of sensitive configuration data, password hashes, and unauthorized configuration modifications.

[Mitigation] Immediately upgrade the camera firmware to version 6.3.40 or higher and restrict external internet access to the device.

[Affected Scope] VMware vCenter Server 7.0 and 8.0 families, VMware Cloud Foundation 4.x and 5.x families

[Impact] An unauthenticated attacker with network access can escalate privileges to root by sending a specially crafted network packet

[Mitigation] Immediately upgrade to the patched versions (vCenter 8.0 U3b or later, 7.0 U3t or later) as recommended by Broadcom

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x

[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges

[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-40711

[Impact] A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE)....

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Cisco Smart Licensing Utility (CSLU) versions prior to 2.3.0

[Impact] Unauthenticated remote attackers can gain full administrative access to the CSLU application API using hardcoded static credentials

[Mitigation] Immediately upgrade CSLU to version 2.3.0 or later, and restrict external access to the CSLU API ports using firewalls

[Affected Scope] Progress WhatsUp Gold versions released before 2024.0.0

[Impact] An unauthenticated remote attacker can execute arbitrary SQL queries to retrieve sensitive database information, including encrypted user password hashes

[Mitigation] Immediately upgrade WhatsUp Gold to version 2024.0.0 or later and restrict database and web console access

[Affected Scope] SonicWall Firewall Gen 5 and Gen 6 devices, and Gen 7 devices running SonicOS 7.0.1-5035 and older versions

[Impact] Unauthenticated remote attackers can gain unauthorized access to firewall resources and, under specific conditions, cause the firewall to crash, leading to a Denial of Service (DoS)

[Mitigation] Immediately apply the latest firmware patches provided by SonicWall, and restrict or disable WAN management access to the firewall

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and prior versions

[Impact] Remote unauthenticated attackers can exploit hardcoded credentials to access internal functionality and modify sensitive data.

[Mitigation] Immediately apply the official SolarWinds 12.8.3 Hotfix 2 or later, and restrict external network access.

[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)

[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and all prior versions

[Impact] Successful exploitation allows remote attackers to execute arbitrary commands on the host machine via unsafe Java deserialization, potentially leading to full system compromise

[Mitigation] Immediately apply the official SolarWinds Web Help Desk 12.8.3 Hotfix 1 or upgrade to the latest patched version

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-7593

[Impact] Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated a...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1050

[Impact] Unauthenticated remote attackers can write arbitrary files with SYSTEM authority, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1050 or later, and restrict external network access.

[Affected Scope] Roundcube Webmail versions through 1.5.7 and 1.6.x through 1.6.7

[Impact] A remote attacker can execute malicious scripts in the victim's browser session by sending a crafted email, enabling unauthorized access, theft, and transmission of the victim's emails.

[Mitigation] Immediately upgrade Roundcube Webmail to the patched versions (1.5.8, 1.6.8, or later).

[Affected Scope] Apache OFBiz versions up to and including 18.12.14

[Impact] Unauthenticated remote attackers can execute arbitrary screen rendering code and system commands by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Apache OFBiz to the latest stable version 18.12.15 or higher

[Affected Scope] Acronis Cyber Infrastructure (ACI) versions prior to 5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, and 5.4.4-132

[Impact] Unauthenticated remote attackers can exploit default credentials to execute arbitrary commands and gain full control over the infrastructure

[Mitigation] Immediately upgrade to the patched versions (5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, 5.4.4-132 or later)

[Affected Scope] Palo Alto Networks Expedition versions prior to 1.2.92

[Impact] Attackers with network access can bypass authentication to take over the Expedition administrator account, exposing firewall configurations, credentials, and API keys

[Mitigation] Immediately upgrade Expedition to version 1.2.92 or later, and restrict network access to authorized administrator IPs only