CVE Vulnerability Advisory Database

[Affected Scope] SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1

[Impact] A remote, unauthenticated attacker can bypass authentication mechanisms to execute arbitrary API commands, potentially leading to complete compromise of the SolarWinds instance

[Mitigation] Immediately apply the official SolarWinds hotfixes/patches and restrict external access to the Orion API port

[Affected Scope] Zyxel USG, ATP, VPN, and ZyWALL series firewalls and AP controllers running ZLD firmware version 4.60

[Impact] Remote attackers can gain full administrative access to the device's SSH server or web interface using an undocumented hardcoded account ('zyfwp')

[Mitigation] Immediately upgrade to ZLD v4.60 Patch 1 or later, and restrict WAN-side access to management interfaces (SSH/HTTPS).

[Affected Scope] All Cyberoam Next-Generation Firewall (NGFW) appliances running Cyberoam OS released prior to 2020-12-04 with WebAdmin enabled

[Impact] Unauthenticated remote attackers can execute arbitrary SQL statements, bypass authentication, compromise the database, and gain full administrative control over the firewall appliance

[Mitigation] Apply the latest official Cyberoam OS security patches immediately and restrict external WAN access to the WebAdmin interface

[Affected Scope] Apache Struts framework versions 2.0.0 through 2.5.25

[Impact] Unauthenticated remote attackers can execute arbitrary code on the host system by exploiting forced double OGNL evaluation in tag attributes

[Mitigation] Immediately upgrade Apache Struts to version 2.5.26 or higher, and avoid evaluating raw user input inside Struts tag attributes

[Affected Scope] VMware Workspace ONE Access, Access Connector, Identity Manager, and Identity Manager Connector

[Impact] An authenticated attacker with administrative access to the configurator interface can execute arbitrary OS commands with escalated privileges

[Mitigation] Apply the official security patches specified in VMware Advisory VMSA-2020-0027 immediately, or implement the recommended workaround scripts

[Affected Scope] Apache Airflow versions prior to 1.10.11, and existing installations retaining default configurations

[Impact] Unauthenticated attackers can access the Experimental API to trigger arbitrary DAGs, leading to full remote code execution (RCE) and server compromise

[Mitigation] Upgrade Apache Airflow to version 1.10.11 or higher, or explicitly configure the API authentication backend to 'deny_all' in airflow.cfg

[Affected Scope] SaltStack Salt versions up to and including 3002 with Salt API and SSH client enabled

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the target server by sending crafted HTTP requests

[Mitigation] Apply the official SaltStack security patches immediately, or disable the SSH client integration in the Salt API configuration

[Affected Scope] Google Chrome for Android prior to version 86.0.4240.185

[Impact] A remote attacker who has compromised the renderer process can trigger a heap buffer overflow in the UI component via a crafted HTML page, potentially leading to a complete sandbox escape and arbitrary code execution on the target device

[Mitigation] Immediately update Google Chrome for Android to version 86.0.4240.185 or later via the Google Play Store

[Affected Scope] Google Chrome versions prior to 86.0.4240.111 and FreeType library versions prior to 2.10.4

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page or font file

[Mitigation] Immediately upgrade Google Chrome to version 86.0.4240.111 or later, and update the FreeType library to version 2.10.4 or higher

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers with network access via HTTP can bypass authentication on the administration console and achieve full remote code execution (RCE)

[Mitigation] Immediately apply the official Oracle security patches and restrict network access to the WebLogic Administration Console (/console)

[Affected Scope] QNAP QTS versions prior to 4.4.2.1231 Build 20200302, 4.4.1.1201 Build 20200130, 4.3.6.1218 Build 20200214, 4.3.4.1190 Build 20200107, 4.3.3.1161 Build 20200109, and 4.2.6 Build 20200109

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges on the target NAS device, leading to complete system compromise

[Mitigation] Immediately upgrade QTS to the latest patched firmware version and restrict external internet access to the NAS management interface

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can bypass authentication via HTTP and gain complete control (RCE) over the Oracle WebLogic Server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict external network access to the administration console (/console)

[Affected Scope] Oracle Solaris 10 and Solaris 11 (prior to version 11.1)

[Impact] Unauthenticated remote attackers can exploit this vulnerability over the network to gain full root privileges and take over the system

[Mitigation] Apply the official vendor patches immediately, or disable Keyboard-Interactive authentication and PAM usage in the SSH configuration

[Affected Scope] VMware ESXi 7.0 (prior to ESXi_7.0.1-0.0.16850804), 6.7 (prior to ESXi670-202010401-SG), and 6.5 (prior to ESXi650-202010401-SG)

[Impact] A malicious actor with access to port 427 on the management network can trigger a Use-After-Free in the OpenSLP service, leading to unauthenticated Remote Code Execution (RCE)

[Mitigation] Apply the official VMware security patches immediately, or disable the OpenSLP service on ESXi hosts as a temporary workaround

[Affected Scope] SonicWall firewall appliances running SonicOS Gen 6 (prior to 6.5.4.7, 6.5.1.12, 6.0.5.3), SonicOSv (prior to 6.5.4.v), and Gen 7 (prior to 7.0.0.0)

[Impact] An unauthenticated remote attacker can trigger a Denial of Service (DoS) or potentially execute arbitrary code with root privileges by sending a specially crafted HTTP request to the firewall

[Mitigation] Immediately upgrade to the patched firmware versions provided by SonicWall and restrict external access to the management interface

[Affected Scope] NETGEAR JGS516PE devices running firmware versions prior to 2.6.0.43

[Impact] Unauthenticated remote attackers can bypass authentication to access sensitive management functions, potentially leading to arbitrary command execution and full device compromise

[Mitigation] Immediately upgrade the JGS516PE firmware to version 2.6.0.43 or later and restrict access to the management interface

[Affected Scope] Sophos SG UTM versions prior to v9.705 MR5, v9.607 MR7, and v9.511 MR11 with WebAdmin enabled

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade to patched firmware versions (v9.705 MR5, v9.607 MR7, v9.511 MR11 or later) and restrict external access to WebAdmin (TCP 4444)

[Affected Scope] WordPress File Manager (wp-file-manager) plugin versions 6.0 through 6.8

[Impact] Unauthenticated remote attackers can upload and execute arbitrary PHP code, leading to complete compromise of the underlying web server

[Mitigation] Immediately update the File Manager plugin to version 6.9 or higher, or completely deactivate and remove the plugin if not required

[Affected Scope] FUEL CMS versions 1.4.7 and prior

[Impact] Unauthenticated remote attackers can exploit this vulnerability to extract sensitive database information, hijack administrator sessions, or escalate to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade FUEL CMS to the latest stable release (1.4.8 or higher) and apply WAF rules to block malicious payloads.

[Affected Scope] vBulletin versions 5.5.4 through 5.6.2

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and system commands on the target server via crafted HTTP requests

[Mitigation] Apply the official security patches immediately or restrict access to the vulnerable PHP template rendering module