CVE Vulnerability Advisory Database

[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01

[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service

[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface

[Affected Scope] All Node.js database management environments running mongo-express versions prior to 0.54.0

[Impact] Authenticated attackers can bypass the sandbox and execute arbitrary system commands on the host OS via endpoints utilizing the toBSON method

[Mitigation] Immediately upgrade the mongo-express package to version 0.54.0 or higher, restrict external access, and enforce strong authentication

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions through 2019.3.1023 (and certain configurations prior to 2020.1.114)

[Impact] If encryption keys are compromised or known, attackers can exploit the RadAsyncUpload function to deserialize malicious .NET objects, resulting in unauthorized Remote Code Execution (RCE) on the target web server.

[Mitigation] Upgrade Telerik UI to version 2020.1.114 or later, or immediately modify web.config to disable RadAsyncUpload or rotate the encryption keys.

[Affected Scope] OpenSLP service running on VMware ESXi and Horizon DaaS appliances.

[Impact] Unauthenticated remote attackers can execute arbitrary code or fully compromise the host by sending malicious SLP messages over the network.

[Mitigation] Apply official VMware security patches immediately, or disable the SLP service and block port 427 (TCP/UDP) as a temporary workaround.

[Affected Scope] QNAP Photo Station versions and associated QTS operating system environments

[Impact] Unauthenticated remote attackers can access or modify critical system files, potentially leading to full Remote Code Execution (RCE)

[Mitigation] Immediately update QNAP Photo Station to the latest secure version and restrict external access

[Affected Scope] QNAP QTS operating system and Photo Station application

[Impact] Unauthenticated remote attackers can inject arbitrary system commands via crafted HTTP requests, leading to complete system compromise

[Mitigation] Immediately update QTS and Photo Station to the latest patched versions recommended by QNAP

[Affected Scope] PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24, and 7.3.x below 7.3.11 running in certain Nginx + PHP-FPM configurations

[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory write in the PHP-FPM process, leading to arbitrary remote code execution (RCE) on the target web server

[Mitigation] Immediately upgrade PHP to patched versions (7.1.33, 7.2.24, 7.3.11 or higher) and configure Nginx with 'try_files' to verify file existence before passing requests to FastCGI

[Affected Scope] Exim mail server versions 4.92 through 4.92.2

[Impact] Unauthenticated remote attackers can trigger a heap-based buffer overflow by sending a crafted, long EHLO command, leading to arbitrary code execution or complete denial of service (DoS)

[Mitigation] Immediately upgrade Exim to the latest stable version (4.92.3 or higher) and restrict SMTP command lengths as a temporary workaround

[Affected Scope] D-Link router and AP models including DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and achieve full system compromise by sending specially crafted HTTP requests.

[Mitigation] Since most affected devices are End-of-Life (EoL), immediately replace them with supported models, or restrict WAN-side management access and disable remote administration.

[Affected Scope] vBulletin versions 5.0.0 through 5.5.4.

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and system commands on the host server, leading to complete system compromise.

[Mitigation] Apply official security patches immediately, upgrade to vBulletin 5.5.5 or later, and configure Web Application Firewall (WAF) rules to block malicious routing requests.

[Affected Scope] D-Link ShareCenter DNS-320 NAS devices running firmware versions up to and including 2.05.B10

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests.

[Mitigation] Immediately restrict external internet access to the device and replace the legacy/EoL hardware with a supported model.

[Affected Scope] Webmin versions 1.920 and prior (with password change feature enabled)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP POST request.

[Mitigation] Immediately upgrade Webmin to the latest secure version (1.930 or higher) or disable the password_change.cgi script.

[Affected Scope] SAP Commerce Cloud (formerly Hybris) versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, and 1905 with the virtualjdbc extension enabled

[Impact] Unauthenticated remote attackers can exploit insecure deserialization to execute arbitrary system commands with 'Hybris' user privileges on the target host

[Mitigation] Apply the official SAP security patch (SAP Note 2786035), disable the unused virtualjdbc extension, or restrict external access to the endpoint

[Affected Scope] Jira Server and Data Center versions from 4.4.0 before 7.6.14, 7.7.0 before 7.13.5, 8.0.0 before 8.0.3, 8.1.0 before 8.1.2, and 8.2.0 before 8.2.3

[Impact] Unauthenticated remote attackers can exploit the email template rendering logic to execute arbitrary system commands, leading to full system compromise

[Mitigation] Immediately upgrade Jira Server and Data Center to the patched versions (7.6.14, 7.13.5, 8.0.3, 8.1.2, 8.2.3 or later)

[Affected Scope] Linear eMerge E3-Series physical access control devices (versions 1.00-06 and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests

[Mitigation] Immediately isolate vulnerable devices from the public internet and restrict access using strict firewall rules or apply the latest firmware updates

[Affected Scope] Exim mail server versions 4.87 to 4.91 inclusive

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted recipient addresses

[Mitigation] Immediately upgrade Exim packages to a patched version (4.92 or higher) and apply temporary configuration workarounds

[Affected Scope] Atlassian Crowd and Crowd Data Center from version 2.1.0 up to 3.4.4 (specific minor version ranges)

[Impact] Unauthenticated remote attackers can upload and install arbitrary plugins, leading to complete remote code execution (RCE) on the host system

[Mitigation] Immediately upgrade to the fixed versions (3.0.5, 3.1.6, 3.2.8, 3.3.5, 3.4.4 or later) or disable/remove the pdkinstall plugin

[Affected Scope] Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending a malicious serialized .NET object in the __CSRFTOKEN HTTP POST parameter

[Mitigation] Apply official security patches, disable the vulnerable AntiCSRF module, or upgrade to a supported secure version

[Affected Scope] Synacor Zimbra Collaboration Suite (ZCS) 8.7.x before 8.7.11p10

[Impact] Unauthenticated remote attackers can exploit this XML External Entity (XXE) vulnerability to read arbitrary local files, perform SSRF, and achieve Remote Code Execution (RCE)

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to version 8.7.11p10 or later, and restrict external access to the Autodiscover servlet endpoint

[Affected Scope] Citrix Workspace App for Windows before version 1904

[Impact] Unauthenticated remote attackers can exploit incorrect access control mechanisms to execute arbitrary code and gain full system privileges on the target host

[Mitigation] Immediately upgrade affected client installations to version 1904 or later, and restrict network access for unpatched endpoints