CVE Vulnerability Advisory Database

[Affected Scope] Grandstream UCM6200 series IP PBX (RCE as root in versions prior to 1.0.19.20; HTML injection in versions prior to 1.0.20.17)

[Impact] Unauthenticated remote attackers can execute arbitrary shell commands with root privileges or inject malicious HTML into password recovery emails via crafted HTTP requests.

[Mitigation] Immediately upgrade the device firmware to the latest secure version (1.0.20.17 or higher) and restrict external access to the management interface.

[Affected Scope] Liferay Portal versions prior to 7.2.1 CE GA2

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting the JSON web services (JSONWS) API to deserialize untrusted Java objects

[Mitigation] Immediately upgrade Liferay Portal to version 7.2.1 CE GA2 or later, and restrict external access to the JSONWS API endpoints

[Affected Scope] Trend Micro Apex One (2019) and OfficeScan XG servers.

[Impact] Unauthenticated remote attackers can write arbitrary data to arbitrary paths, bypassing ROOT login and achieving full system compromise.

[Mitigation] Immediately apply the official Trend Micro Critical Patches (CP) and restrict access to management ports.

[Affected Scope] Unraid OS versions 6.8.0 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary commands with root privileges, leading to complete system compromise.

[Mitigation] Immediately upgrade Unraid OS to a secure version (6.8.1 or later) and restrict external access to the management web interface.

[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol

[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks

[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445

[Affected Scope] Sumavision Enhanced Multimedia Router (EMR) version 3.0.4.27 and potentially prior firmware versions.

[Impact] Unauthenticated remote attackers can create arbitrary accounts with administrative privileges via CSRF or direct HTTP requests, leading to complete device compromise.

[Mitigation] Restrict external access to the web management interface, deploy WAF rules to block malicious parameter patterns, and apply the latest secure firmware from the vendor.

[Affected Scope] All SMDAgents connected to SAP Solution Manager (User Experience Monitoring) version 7.2

[Impact] Unauthenticated attackers can compromise all connected SMDAgents and execute arbitrary remote commands with high privileges

[Mitigation] Immediately apply the official SAP security patch (SAP Note 2890213) and restrict network access to the Solution Manager ports

[Affected Scope] Zoho ManageEngine Desktop Central versions prior to 10.0.474

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/Administrator privileges by sending specially crafted serialized Java objects

[Mitigation] Immediately upgrade to version 10.0.474 or higher, and restrict external access to the management ports

[Affected Scope] ZyXEL NAS devices (NAS326, NAS520, NAS540, NAS542) running firmware versions prior to 5.21, and all end-of-support NSA series models

[Impact] An unauthenticated remote attacker can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP request

[Mitigation] Immediately upgrade active models to the patched firmware versions, and isolate or replace end-of-support (EoL) models from the network

[Affected Scope] Apache Tomcat versions 9.0.0.M1 to 9.0.0.30, 8.5.0 to 8.5.50, and 7.0.0 to 7.0.99

[Impact] Attackers with access to the AJP port (default 8009) can read arbitrary files from the web application or execute arbitrary code (RCE) if file upload is permitted

[Mitigation] Upgrade to Apache Tomcat 9.0.31, 8.5.51, 7.0.100 or later, or disable/restrict the AJP Connector in the configuration

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.8.15 Patch 7 with WebEx zimlet installed and zimlet JSP enabled

[Impact] Unauthenticated remote attackers can exploit Server-Side Request Forgery (SSRF) to access internal network resources, extract sensitive data, or pivot to further remote code execution (RCE)

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 7 or later, or disable and undeploy the unused WebEx zimlet

[Affected Scope] EyesOfNetwork version 5.3 and prior

[Impact] The default installation uses a hardcoded API key ('EONAPI_KEY'), allowing unauthenticated remote attackers to calculate and generate admin access tokens to compromise the system

[Mitigation] Immediately replace the hardcoded API key with a unique cryptographically secure string and upgrade to the patched version

[Affected Scope] All PlaySMS installations running versions prior to 1.4.3

[Impact] Unauthenticated remote attackers can inject malicious template payloads to execute arbitrary operating system commands, leading to full system compromise

[Mitigation] Immediately upgrade to PlaySMS version 1.4.3 or higher, restrict external access, and deploy Web Application Firewall (WAF) rules

[Affected Scope] DrayTek Vigor2960 (1.3.1_Beta and prior), Vigor3900 (1.4.4_Beta and prior), and Vigor300B (1.3.3_Beta, 1.4.2.1_Beta, 1.4.4_Beta and prior)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the web management interface, leading to complete device compromise

[Mitigation] Immediately upgrade the device firmware to version v1.5.1 or higher, and disable WAN-side web management access

[Affected Scope] OpenSMTPD version 6.6 running with the default 'uncommented' configuration on OpenBSD 6.6 and other platforms.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by injecting shell metacharacters into the MAIL FROM field of an SMTP session.

[Mitigation] Immediately upgrade OpenSMTPD to the patched version 6.6.1p1, 6.6.2p1, or later.

[Affected Scope] Oracle Coherence versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, including WebLogic Server environments utilizing these components

[Impact] Unauthenticated remote attackers can exploit this vulnerability via the T3 protocol to execute arbitrary code and achieve complete takeover of the target system

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict external access to the T3/T3S protocols (default port 7001) using connection filters

[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0

[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the WebLogic Server via malicious IIOP requests

[Mitigation] Apply the official Oracle CPU patches immediately, or disable the IIOP protocol and restrict access to port 7001

[Affected Scope] Systems running Microsoft .NET Framework versions 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and Microsoft SharePoint Server.

[Impact] An unauthenticated remote attacker can execute arbitrary code with system privileges by sending a specially crafted XOML (XML Process Markup Language) file to the target server.

[Mitigation] Immediately apply the official Microsoft security patches and restrict untrusted XOML workflow compilation within your SharePoint environment.

[Affected Scope] D-Link DIR-859 Wi-Fi router firmware versions 1.05 and 1.06B01 Beta01

[Impact] An unauthenticated remote attacker on the local network can execute arbitrary system commands as root by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service

[Mitigation] Apply the official firmware security patches, disable the UPnP service, and restrict access to the router management interface

[Affected Scope] Citrix Application Delivery Controller (ADC) and Gateway versions 10.5, 11.1, 12.0, 12.1, and 13.0

[Impact] Unauthenticated remote attackers can exploit directory traversal to execute arbitrary code and gain full control of the target system

[Mitigation] Immediately apply official Citrix security patches, or implement temporary HTTP/HTTPS request blocking policies (Responder Policies) prior to patching