CVE Vulnerability Advisory Database

[Affected Scope] Ruckus Wireless Admin and AP controller devices running version 10.4 or lower

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP GET request

[Mitigation] Immediately apply the official vendor firmware patches and restrict access to the management interface from the public internet

[Affected Scope] Zoho ManageEngine on-premise products with SAML SSO configured or previously enabled (e.g., ServiceDesk Plus through 14003, ADSelfService Plus through 6210, Endpoint Central through 10.1.2228.10)

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending a specially crafted SAML response containing malicious XSLT payloads

[Mitigation] Immediately upgrade the affected ManageEngine products to the latest patched versions, or temporarily disable SAML SSO and restrict access to SAML endpoints

[Affected Scope] CentOS Web Panel (CWP) 7 versions prior to 0.9.8.1147

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target server by injecting shell metacharacters into the login parameter.

[Mitigation] Immediately upgrade CWP 7 to version 0.9.8.1147 or later, and restrict access to the management ports using firewalls.

[Affected Scope] FortiOS versions 7.2.0 to 7.2.2, 7.0.0 to 7.0.8, 6.4.0 to 6.4.10, 6.2.0 to 6.2.11, 6.0.15 and earlier; FortiProxy versions 7.2.0 to 7.2.1, 7.0.7 and earlier

[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target system by sending specifically crafted HTTP/HTTPS requests

[Mitigation] Immediately upgrade to the patched firmware versions or disable the SSL-VPN service and restrict access using local-in policies if patching is delayed

[Affected Scope] Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus < 97.3.0

[Impact] Attackers can trigger a Use-After-Free (UAF) condition via crafted web content, leading to arbitrary code execution and a complete sandbox escape on the host OS

[Mitigation] Immediately update all affected Mozilla products to their respective patched versions (Firefox 97.0.2+, Firefox ESR 91.6.1+, Thunderbird 91.6.2+, etc.)

[Affected Scope] Citrix ADC and Citrix Gateway versions 12.1 and 13.0 with SAML SP or IdP configuration enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code on the target appliance and gain full system control by sending specially crafted requests

[Mitigation] Immediately upgrade to the patched firmware versions (12.1-65.25, 13.0-88.16, or higher) provided by Citrix

[Affected Scope] Cacti versions 1.2.x up to 1.2.22, and 1.3.x development branches

[Impact] Unauthenticated remote attackers can bypass authentication via HTTP header manipulation and execute arbitrary OS commands with the privileges of the web server

[Mitigation] Immediately upgrade Cacti to version 1.2.23 or later, and restrict access to the monitoring interface

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)

[Affected Scope] Netwrix Auditor server and User Activity Video Recording agents installed on monitored systems

[Impact] Unauthenticated remote attackers can execute arbitrary code with 'NT AUTHORITY\SYSTEM' privileges on affected servers and monitored hosts

[Mitigation] Immediately upgrade Netwrix Auditor to the latest secure version and restrict network access to agent communication ports

[Affected Scope] D-Link DSL-2750B devices running firmware versions prior to 1.05

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the 'cli' parameter in login.cgi

[Mitigation] Apply the official firmware patch (v1.05 or later) or immediately disable WAN-side access to the web management interface

[Affected Scope] Oracle E-Business Suite (EBS) versions 12.2.3 through 12.2.11, specifically the Upload component of Web Applications Desktop Integrator.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to upload arbitrary files and achieve full system takeover (RCE).

[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) patches and restrict external access to vulnerable endpoints.

[Affected Scope] FortiOS (7.2.0 to 7.2.1, 7.0.0 to 7.0.6), FortiProxy (7.2.0, 7.0.0 to 7.0.6), FortiSwitchManager (7.2.0, 7.0.0)

[Impact] An unauthenticated remote attacker can bypass authentication via specially crafted HTTP/HTTPS requests, gaining full administrative access to perform arbitrary operations

[Mitigation] Immediately upgrade to patched versions (FortiOS 7.2.2 / 7.0.7 or higher) or disable HTTP/HTTPS administrative access from untrusted networks

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages

[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0 running on Red Hat-based distributions (RHEL/CentOS) where the 'pax' utility is missing.

[Impact] Unauthenticated attackers can upload arbitrary files to the web root directory via a cpio path traversal loophole during amavis scanning, leading to full system compromise.

[Mitigation] Immediately install the 'pax' utility via the OS package manager or upgrade Zimbra to the latest patched version.

[Affected Scope] Sophos Firewall version v19.0 MR1 and older affecting User Portal and Webadmin interfaces

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the firewall device by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade to the latest firmware version (v19.0 MR2 or later) and disable WAN access to Webadmin and User Portal

[Affected Scope] GLPI versions up to and including 10.0.2, specifically within the bundled htmLawed module

[Impact] Unauthenticated remote attackers can inject and execute arbitrary PHP code, leading to full system compromise

[Mitigation] Immediately upgrade GLPI to version 10.0.3 or higher, or delete the vulnerable test script (htmLawedTest.php)

[Affected Scope] QNAP Photo Station running on QTS 5.0.1, 5.0.0, 4.5.x, 4.3.6, 4.3.3, and 4.2.6

[Impact] Unauthenticated remote attackers can modify critical system files, potentially leading to complete device compromise

[Mitigation] Immediately update Photo Station to the patched versions (6.1.2, 6.0.22, 5.7.18, 5.4.15, 5.2.14 or later)

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions 8.8.15 and 9.0

[Impact] Unauthenticated attackers can bypass authentication, upload malicious ZIP archives, and exploit directory traversal to write arbitrary files, leading to Remote Code Execution (RCE)

[Mitigation] Immediately apply the official Zimbra security patches and restrict external access to the mboximport endpoint

[Affected Scope] Confluence Server and Data Center environments with Questions for Confluence app versions 2.7.34, 2.7.35, and 3.0.2 installed

[Impact] A remote, unauthenticated attacker can exploit the hardcoded 'disabledsystemuser' account to log into Confluence and access all sensitive content

[Mitigation] Immediately upgrade the Questions for Confluence app to a non-vulnerable version or disable/delete the 'disabledsystemuser' account