CVE Vulnerability Advisory Database

[Affected Scope] On-premises and virtual appliance deployments of SonicWall Email Security running version 10.0.9.x.

[Impact] Unauthenticated remote attackers can create administrative accounts by sending crafted HTTP requests, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched firmware version (10.0.9.6173, 10.0.10, or higher).

[Affected Scope] Systems running iOS versions prior to 14.4, iPadOS versions prior to 14.4, macOS Big Sur versions prior to 11.2, and Catalina/Mojave without Security Update 2021-001

[Impact] A remote attacker can execute arbitrary code on the target system, and active exploitation in the wild has been reported

[Mitigation] Immediately apply the official Apple software updates to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later

[Affected Scope] Apple iOS before 14.4, iPadOS before 14.4, macOS Big Sur before 11.2, and macOS Catalina/Mojave prior to Security Update 2021-001.

[Impact] A remote attacker can execute arbitrary code on the target device via malicious web content, bypassing sandbox restrictions. This vulnerability has been actively exploited in the wild.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to iOS/iPadOS 14.4, macOS Big Sur 11.2, or later.

[Affected Scope] F5 BIG-IP versions 16.0.x, 15.1.x, 14.1.x, 13.1.x, and 12.1.x prior to patched releases

[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted URI requests, leading to TMM Denial of Service (DoS), URL-based access control bypass, or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to the designated hotfix/patched versions recommended by F5, or apply temporary traffic filtering workarounds

[Affected Scope] F5 BIG-IP (16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x) and BIG-IQ (7.1.0.x, 7.0.0.x) management interfaces running iControl REST.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges, leading to complete compromise of the target device.

[Mitigation] Immediately upgrade to the patched versions provided by F5 and restrict access to the iControl REST interface (TCP 443) from untrusted networks.

[Affected Scope] Rockwell Automation Studio 5000 Logix Designer v21 and later, RSLogix 5000 v16 through v20, and associated Logix controllers

[Impact] Unauthenticated remote attackers can obtain the hardcoded cryptographic key, bypass verification mechanisms, and gain unauthorized access to modify controller logic or configurations

[Mitigation] Implement network segmentation, restrict EtherNet/IP ports, transition controller keyswitches to 'Run' mode, and deploy CIP Security where applicable

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive mailbox data, and chain with other vulnerabilities to execute arbitrary code (RCE)

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) and Security Update (SU), or implement IIS URL Rewrite rules to block malicious requests

[Affected Scope] Veritas Backup Exec Agent versions prior to 21.2 (Windows/Linux)

[Impact] Remote attackers can bypass authentication to gain unauthorized access to the Agent and execute privileged commands with SYSTEM/root privileges

[Mitigation] Immediately upgrade Veritas Backup Exec to version 21.2 or later, or restrict network access to the Agent port (default TCP 10000)

[Affected Scope] VMware vCenter Server versions 7.0, 6.7, 6.5 and VMware Cloud Foundation versions 4.x, 3.x

[Impact] Unauthenticated remote attackers with network access to port 443 can execute arbitrary commands with unrestricted privileges on the underlying operating system

[Mitigation] Immediately upgrade to the patched versions or apply the official workaround to disable the vulnerable plugin

[Affected Scope] Accellion FTA versions 9_12_370 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and gain full system control by sending crafted POST requests to various admin endpoints

[Mitigation] Immediately upgrade to Accellion FTA version 9_12_380 or later, or migrate to a supported secure file transfer platform

[Affected Scope] Accellion FTA 9_12_411 and earlier

[Impact] Unauthenticated remote attackers can exploit this vulnerability via crafted POST requests to access internal network resources or chain it with other flaws for remote code execution

[Mitigation] Immediately upgrade Accellion FTA to version 9_12_416 or later and restrict external access

[Affected Scope] Accellion FTA versions 9_12_370 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary SQL commands via a crafted Host header, leading to sensitive data exposure or potential remote code execution (RCE)

[Mitigation] Immediately upgrade Accellion FTA to version 9_12_380 or later and restrict external access

[Affected Scope] Micro Focus Operations Bridge Reporter (OBR) version 10.40.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the OBR server, leading to complete system compromise.

[Mitigation] Apply the official vendor security patch (KM03775947) immediately and restrict external access to the OBR management ports.

[Affected Scope] SonicWall SMA100 appliances running firmware build version 10.x

[Impact] Unauthenticated remote attackers can execute arbitrary SQL queries to retrieve usernames, passwords, and active session information, leading to complete device compromise

[Mitigation] Immediately upgrade the SMA100 firmware to version 10.2.0.5 or higher to apply official security patches

[Affected Scope] QNAP QTS operating system and Helpdesk application versions prior to 3.0.3

[Impact] Unauthenticated remote attackers can exploit improper access control to gain elevated privileges or read sensitive system information

[Mitigation] Immediately update the QTS operating system and upgrade the Helpdesk application to version 3.0.3 or later

[Affected Scope] D-Link DNS-320 ShareCenter NAS devices (Firmware v2.06B01 Revision Ax and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests, leading to full system compromise

[Mitigation] Since this product is End-of-Life (EOL), immediately isolate the device from the network and replace it with a supported model

[Affected Scope] D-Link DIR-825 R1 devices running firmware versions up to 3.0.1 before 2020-11-20

[Impact] Remote unauthenticated attackers can execute arbitrary code with root privileges by sending crafted HTTP requests, leading to complete device compromise

[Mitigation] Apply the latest official firmware patch immediately, disable WAN-side remote management, or replace end-of-life hardware

[Affected Scope] ONLYOFFICE Document Server versions prior to 5.6.3 (when JWT is enabled)

[Impact] Attackers can achieve Remote Code Execution (RCE) by uploading malicious files to arbitrary directories.

[Mitigation] Immediately update ONLYOFFICE Document Server to version 5.6.3 or later.

[Affected Scope] Laravel applications running versions prior to 8.4.2 and utilizing facade/ignition versions prior to 2.5.2 with debug mode (APP_DEBUG=true) enabled

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server, leading to complete system compromise and data exfiltration

[Mitigation] Upgrade the facade/ignition package to version 2.5.2 or higher, and ensure that Laravel debug mode (APP_DEBUG) is set to 'false' in production environments

[Affected Scope] Google Chrome prior to version 86.0.4240.198

[Impact] A remote attacker who has compromised the renderer process can bypass sandbox boundaries and potentially execute arbitrary code on the host system via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (86.0.4240.198 or higher)