CVE Vulnerability Advisory Database

[Affected Scope] DrayTek Vigor3900, Vigor2960, and Vigor300B devices running firmware versions prior to 1.5.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP POST request

[Mitigation] Immediately upgrade the device firmware to version 1.5.1 or higher and disable external WAN access to the management interface

[Affected Scope] IBM Data Risk Manager versions 2.0.1, 2.0.2, 2.0.3, and 2.0.4.

[Impact] A remote authenticated attacker with high privileges could execute arbitrary OS commands, leading to complete system compromise.

[Mitigation] Apply the official IBM security patches immediately and restrict network access to the management interface.

[Affected Scope] Roundcube Webmail versions before 1.4.4

[Impact] Unauthenticated attackers can execute arbitrary OS commands and gain full control of the mail server via shell metacharacters

[Mitigation] Immediately upgrade Roundcube Webmail to version 1.4.4 or later and restrict ImageMagick configuration paths

[Affected Scope] Juniper Networks Junos OS devices with HTTP/HTTPS services (J-Web, Web Authentication, Dynamic-VPN, etc.) enabled

[Impact] Unauthenticated attackers can read arbitrary system files, hijack active administrator session tokens, or inject commands into web logs to execute limited commands

[Mitigation] Upgrade Junos OS to the recommended patched release, or disable HTTP/HTTPS and J-Web services if they are not business-critical

[Affected Scope] SaltStack Salt versions before 2019.2.4 and 3000 before 3000.2

[Impact] Unauthenticated remote attackers can bypass authentication via the ClearFuncs class to retrieve master tokens or execute arbitrary commands on connected salt minions

[Mitigation] Immediately upgrade SaltStack to patched versions (2019.2.4, 3000.2, or higher) and restrict access to salt-master ports (4505, 4506)

[Affected Scope] Cisco IP Phone series running vulnerable firmware versions with the web server service enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or trigger a device reload, leading to a Denial of Service (DoS) condition

[Mitigation] Apply official vendor firmware patches immediately, or disable the Web Access feature and restrict HTTP/HTTPS access via ACLs

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and take full control of the Oracle WebLogic Server by sending malicious serialized data via T3 or IIOP protocols

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict external access to T3/IIOP protocols using connection filters and firewalls

[Affected Scope] Liferay Portal versions prior to 7.2.1 CE GA2

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting the JSON web services (JSONWS) API to deserialize untrusted Java objects

[Mitigation] Immediately upgrade Liferay Portal to version 7.2.1 CE GA2 or later, and restrict external access to the JSONWS API endpoints

[Affected Scope] Unraid OS versions 6.8.0 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary commands with root privileges, leading to complete system compromise.

[Mitigation] Immediately upgrade Unraid OS to a secure version (6.8.1 or later) and restrict external access to the management web interface.

[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol

[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks

[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445

[Affected Scope] All SMDAgents connected to SAP Solution Manager (User Experience Monitoring) version 7.2

[Impact] Unauthenticated attackers can compromise all connected SMDAgents and execute arbitrary remote commands with high privileges

[Mitigation] Immediately apply the official SAP security patch (SAP Note 2890213) and restrict network access to the Solution Manager ports

[Affected Scope] Zoho ManageEngine Desktop Central versions prior to 10.0.474

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending specially crafted serialized Java objects

[Mitigation] Immediately upgrade to version 10.0.474 or higher, and restrict external access to the management ports

[Affected Scope] ZyXEL NAS devices (NAS326, NAS520, NAS540, NAS542) running firmware versions prior to 5.21, and all end-of-support NSA series models

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP request

[Mitigation] Immediately upgrade active models to the patched firmware versions, and isolate or replace end-of-support (EoL) models from the network

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50, and 7.0.0 to 7.0.99

[Impact] Attackers with access to the AJP port (default 8009) can read arbitrary files from the web application or execute arbitrary code (RCE) if file upload is permitted

[Mitigation] Upgrade to Apache Tomcat 9.0.31, 8.5.51, 7.0.100 or later, or disable/restrict the AJP Connector in the configuration

[Affected Scope] All PlaySMS installations running versions prior to 1.4.3

[Impact] Unauthenticated remote attackers can inject malicious template payloads to execute arbitrary operating system commands, leading to full system compromise

[Mitigation] Immediately upgrade to PlaySMS version 1.4.3 or higher, restrict external access, and deploy Web Application Firewall (WAF) rules

[Affected Scope] DrayTek Vigor2960 (1.3.1_Beta and prior), Vigor3900 (1.4.4_Beta and prior), and Vigor300B (1.3.3_Beta, 1.4.2.1_Beta, 1.4.4_Beta and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the web management interface, leading to complete device compromise

[Mitigation] Immediately upgrade the device firmware to version v1.5.1 or higher, and disable WAN-side web management access

[Affected Scope] OpenSMTPD version 6.6 running with the default 'uncommented' configuration on OpenBSD 6.6 and other platforms.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by injecting shell metacharacters into the MAIL FROM field of an SMTP session.

[Mitigation] Immediately upgrade OpenSMTPD to the patched version 6.6.1p1, 6.6.2p1, or later.

[Affected Scope] Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, including WebLogic Server environments utilizing these components

[Impact] Unauthenticated remote attackers can exploit this vulnerability via the T3 protocol to execute arbitrary code and achieve complete takeover of the target system

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to the T3/T3S protocols (default port 7001) using connection filters

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the WebLogic Server via malicious IIOP requests

[Mitigation] Apply the official Oracle CPU patches immediately, or disable the IIOP protocol and restrict access to port 7001

[Affected Scope] Systems running Microsoft .NET Framework versions 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and Microsoft SharePoint Server.

[Impact] An unauthenticated remote attacker can execute arbitrary code with system privileges by sending a specially crafted XOML (XML Process Markup Language) file to the target server.

[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted XOML workflow compilation within your SharePoint environment.