CVE Vulnerability Advisory Database

[Affected Scope] All Node.js database management environments running mongo-express versions prior to 0.54.0

[Impact] Authenticated attackers can bypass the sandbox and execute arbitrary system commands on the host OS via endpoints utilizing the toBSON method

[Mitigation] Immediately upgrade the mongo-express package to version 0.54.0 or higher, restrict external access, and enforce strong authentication

[Affected Scope] IBM Planning Analytics versions 2.0.0 through 2.0.8.

[Impact] Unauthenticated remote attackers can overwrite server configurations, authenticate as 'admin', and execute arbitrary commands with root or SYSTEM privileges via TM1 scripting.

[Mitigation] Immediately upgrade to IBM Planning Analytics version 2.0.9 or higher, and restrict network access to TM1 server ports.

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions through 2019.3.1023 (and certain configurations prior to 2020.1.114)

[Impact] If encryption keys are compromised or known, attackers can exploit the RadAsyncUpload function to deserialize malicious .NET objects, resulting in unauthorized Remote Code Execution (RCE) on the target web server.

[Mitigation] Upgrade Telerik UI to version 2020.1.114 or later, or immediately modify web.config to disable RadAsyncUpload or rotate the encryption keys.

[Affected Scope] OpenSLP service running on VMware ESXi and Horizon DaaS appliances.

[Impact] Unauthenticated remote attackers can execute arbitrary code or fully compromise the host by sending malicious SLP messages over the network.

[Mitigation] Apply official VMware security patches immediately, or disable the SLP service and block port 427 (TCP/UDP) as a temporary workaround.

[Affected Scope] QNAP Photo Station versions and associated QTS operating system environments

[Impact] Unauthenticated remote attackers can access or modify critical system files, potentially leading to full Remote Code Execution (RCE)

[Mitigation] Immediately update QNAP Photo Station to the latest secure version and restrict external access

[Affected Scope] QNAP Photo Station and QTS specific versions

[Impact] Unauthenticated remote attackers can access/modify system files and execute arbitrary commands, leading to full system compromise

[Mitigation] Immediately update Photo Station and QTS firmware to the latest recommended security patch versions

[Affected Scope] QNAP QTS operating system and Photo Station application

[Impact] Unauthenticated remote attackers can inject arbitrary system commands via crafted HTTP requests, leading to complete system compromise

[Mitigation] Immediately update QTS and Photo Station to the latest patched versions recommended by QNAP

[Affected Scope] QNAP Photo Station versions running on QTS operating system environments

[Impact] Unauthenticated remote attackers can bypass access control mechanisms to gain unauthorized system access, potentially leading to Remote Code Execution (RCE)

[Mitigation] Immediately update QNAP Photo Station and QTS to the latest official security-patched versions

[Affected Scope] Sangoma FreePBX versions 15.0.16.26 and below, 14.0.13.11 and below, and 13.0.197.13 and below

[Impact] Remote attackers can bypass authentication entirely to gain full administrative access, leading to complete system compromise and unauthorized call routing

[Mitigation] Immediately upgrade the FreePBX framework module to the patched version using the fwconsole utility

[Affected Scope] PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24, and 7.3.x below 7.3.11 running in certain Nginx + PHP-FPM configurations

[Impact] Unauthenticated remote attackers can trigger an out-of-bounds memory write in the PHP-FPM process, leading to arbitrary remote code execution (RCE) on the target web server

[Mitigation] Immediately upgrade PHP to patched versions (7.1.33, 7.2.24, 7.3.11 or higher) and configure Nginx with 'try_files' to verify file existence before passing requests to FastCGI

[Affected Scope] Nostromo nhttpd web server versions 1.9.6 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with the privileges of the web server process via crafted HTTP requests

[Mitigation] Immediately upgrade to the patched version (1.9.7 or later), or restrict web server execution privileges and block anomalous directory traversal paths

[Affected Scope] Exim mail server versions 4.92 through 4.92.2

[Impact] Unauthenticated remote attackers can trigger a heap-based buffer overflow by sending a crafted, long EHLO command, leading to arbitrary code execution or complete denial of service (DoS)

[Mitigation] Immediately upgrade Exim to the latest stable version (4.92.3 or higher) and restrict SMTP command lengths as a temporary workaround

[Affected Scope] D-Link router and AP models including DIR-655C, DIR-866L, DIR-652, DHP-1565, DIR-855L, DAP-1533, DIR-862L, DIR-615, DIR-835, and DIR-825

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and achieve full system compromise by sending specially crafted HTTP requests.

[Mitigation] Since most affected devices are End-of-Life (EoL), immediately replace them with supported models, or restrict WAN-side management access and disable remote administration.

[Affected Scope] vBulletin versions 5.0.0 through 5.5.4.

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and system commands on the host server, leading to complete system compromise.

[Mitigation] Apply official security patches immediately, upgrade to vBulletin 5.5.5 or later, and configure Web Application Firewall (WAF) rules to block malicious routing requests.

[Affected Scope] D-Link ShareCenter DNS-320 NAS devices running firmware versions up to and including 2.05.B10

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests.

[Mitigation] Immediately restrict external internet access to the device and replace the legacy/EoL hardware with a supported model.

[Affected Scope] Some Samsung mobile devices utilizing UICC (SIM cards) that include the SIMalliance Toolbox Browser (S@T Browser)

[Impact] Remote attackers can retrieve sensitive location and IMEI information, or execute arbitrary SIM Toolkit (STK) commands via specially crafted SMS messages without user interaction

[Mitigation] Apply the latest carrier and manufacturer OTA firmware updates, and request a replacement SIM card with S@T Browser security filtering enabled

[Affected Scope] Webmin versions 1.920 and prior (with password change feature enabled)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a specially crafted HTTP POST request.

[Mitigation] Immediately upgrade Webmin to the latest secure version (1.930 or higher) or disable the password_change.cgi script.

[Affected Scope] SAP Commerce Cloud (formerly Hybris) versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, and 1905 with the virtualjdbc extension enabled

[Impact] Unauthenticated remote attackers can exploit insecure deserialization to execute arbitrary system commands with 'Hybris' user privileges on the target host

[Mitigation] Apply the official SAP security patch (SAP Note 2786035), disable the unused virtualjdbc extension, or restrict external access to the endpoint

[Affected Scope] Jira Server and Data Center versions from 4.4.0 before 7.6.14, 7.7.0 before 7.13.5, 8.0.0 before 8.0.3, 8.1.0 before 8.1.2, and 8.2.0 before 8.2.3

[Impact] Unauthenticated remote attackers can exploit the email template rendering logic to execute arbitrary system commands, leading to full system compromise

[Mitigation] Immediately upgrade Jira Server and Data Center to the patched versions (7.6.14, 7.13.5, 8.0.3, 8.1.2, 8.2.3 or later)

[Affected Scope] Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2

[Impact] Insufficient validation of IPC parameters passed from child to parent processes allows a compromised child process to bypass sandbox restrictions and trigger arbitrary web content loading in the non-sandboxed parent process.

[Mitigation] Immediately upgrade all affected installations to Firefox 67.0.4, Firefox ESR 60.7.2, or Thunderbird 60.7.2 or higher.