CVE Vulnerability Advisory Database

[Affected Scope] Fortinet FortiClientEMS versions 7.2.0 through 7.2.2, and 7.0.1 through 7.0.10

[Impact] An unauthenticated remote attacker can execute unauthorized code or system commands with database server privileges via specially crafted packets, leading to complete system compromise

[Mitigation] Immediately upgrade FortiClientEMS to patched versions (7.2.3+ or 7.0.11+) and restrict access to the management ports

[Affected Scope] All JetBrains TeamCity versions prior to 2023.11.4

[Impact] Unauthenticated remote attackers can completely bypass authentication mechanisms to gain administrative privileges, leading to full server compromise and arbitrary remote code execution (RCE)

[Mitigation] Immediately upgrade TeamCity server to version 2023.11.4 or later, or apply the official security patch plugin

[Affected Scope] Progress Kemp LoadMaster OS (LMOS) versions prior to 7.2.48.10, 7.2.54.8, and 7.2.59.2

[Impact] Unauthenticated remote attackers can access the system via the management interface to execute arbitrary OS commands and gain full system control

[Mitigation] Immediately upgrade to patched LMOS versions (7.2.59.2, 7.2.54.8, 7.2.48.10 or higher) and restrict external access to the management interface

[Affected Scope] ConnectWise ScreenConnect versions 23.9.7 and prior

[Impact] Attackers can bypass authentication to create administrative accounts, leading to full system compromise and Remote Code Execution (RCE) [1, 1.1]

[Mitigation] Immediately upgrade to the patched version (23.9.8 or higher) and restrict external access to the management interface

[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions

[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets

[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround

[Affected Scope] Systems running unpatched versions impacted by CVE-2024-21413

[Impact] Microsoft Outlook Remote Code Execution Vulnerability...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Microsoft Exchange Server 2016 and 2019 environments where Cumulative Updates and Extended Protection are not enabled.

[Impact] Unauthenticated remote attackers can perform NTLM credential relay attacks to elevate privileges, gaining administrative access to Exchange servers and compromising mailboxes.

[Mitigation] Upgrade Exchange Server to the latest Cumulative Update (CU) and enforce the Extended Protection feature immediately.

[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests

[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround

[Affected Scope] Jenkins weekly version 2.441 and earlier, LTS version 2.426.2 and earlier

[Impact] Unauthenticated attackers can read arbitrary files on the Jenkins controller file system, potentially leading to Remote Code Execution (RCE) under specific conditions

[Mitigation] Immediately upgrade Jenkins weekly to 2.442 or later, and LTS to 2.426.3 or later, or disable CLI access

[Affected Scope] D-Link DIR-859 router firmware version 1.06B01 and prior.

[Impact] Unauthenticated remote attackers can exploit this vulnerability to read sensitive system configuration files and potentially gain full administrative control over the device.

[Mitigation] This product is End-of-Life (EOL) and will not receive official security patches; immediate retirement and replacement of the device is strongly recommended.

[Affected Scope] Older versions of Atlassian Confluence Data Center and Server (8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x, 8.5.0-8.5.3)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands (RCE) on the affected instance by sending specially crafted HTTP requests.

[Mitigation] Immediately upgrade to the latest patched versions (8.5.4+ or newer LTS releases) provided by Atlassian.

[Affected Scope] Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) gateway appliances

[Impact] An authenticated administrator can send specially crafted HTTP requests to execute arbitrary OS commands with root privileges, leading to full appliance compromise

[Mitigation] Apply the official vendor security patches immediately, or import the temporary mitigation XML file provided by Ivanti to block vulnerable API endpoints

[Affected Scope] GitLab CE/EE versions 16.1 to 16.7.1 (prior to 16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, and 16.7.2)

[Impact] An unauthenticated remote attacker can trigger password reset emails to be sent to an arbitrary, unverified email address, leading to complete account takeover.

[Mitigation] Immediately upgrade GitLab instances to the patched versions (16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, 16.7.2 or later) and enforce Multi-Factor Authentication (MFA).

[Affected Scope] Unitronics Vision and Samba PLCs and HMIs configured using VisiLogic versions prior to 9.9.00

[Impact] Unauthenticated remote attackers with network access can exploit default administrative credentials to gain full control of the target system

[Mitigation] Upgrade VisiLogic to version 9.9.00 or later, change default passwords immediately, and restrict external network exposure

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)

[Affected Scope] ownCloud Core versions from 10.6.0 up to (but excluding) 10.13.1 are affected.

[Impact] Unauthenticated attackers can access, modify, or delete any file if they know the victim's username and the victim has no signing-key configured.

[Mitigation] Immediately upgrade ownCloud Core to version 10.13.1 or higher, and enforce signing-key configurations as a temporary workaround.

[Affected Scope] Qlik Sense Enterprise for Windows (prior to specified patch levels)

[Impact] Unauthenticated remote attackers can elevate privileges and execute arbitrary code on the backend repository server via HTTP request tunneling.

[Mitigation] Immediately apply the official security patches (August 2023 Patch 2 or later, etc.) provided by the vendor.

[Affected Scope] Systems running unpatched versions impacted by CVE-2023-47246

[Impact] In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] All self-hosted versions of Confluence Data Center and Server. (Atlassian Cloud sites are not affected)

[Impact] Unauthenticated remote attackers can reset Confluence setup states and create unauthorized administrator accounts, leading to a complete compromise of confidentiality, integrity, and availability.

[Mitigation] Immediately upgrade to the latest patched versions or restrict external access to the setup endpoints (/setup/*) via reverse proxy or WAF configurations.

[Affected Scope] Apache ActiveMQ brokers and client libraries utilizing the OpenWire protocol

[Impact] Unauthenticated remote attackers can execute arbitrary shell commands on the target system by manipulating serialized class types

[Mitigation] Immediately upgrade both brokers and clients to patched versions (5.15.16, 5.16.7, 5.17.6, or 5.18.3 and above)