CVE Vulnerability Advisory Database

[Affected Scope] Sonatype Nexus Repository Manager versions prior to 3.15.0

[Impact] Unauthenticated remote attackers can execute arbitrary Groovy scripts and gain full system-level control by sending specially crafted HTTP POST requests

[Mitigation] Immediately upgrade to the latest stable version (3.15.0 or higher) or restrict external access to the vulnerable endpoints

[Affected Scope] Jenkins Pipeline: Groovy Plugin 2.63 and earlier

[Impact] Attackers with pipeline script control can bypass the Groovy sandbox to execute arbitrary code on the Jenkins master JVM

[Mitigation] Immediately upgrade Jenkins Pipeline: Groovy Plugin to version 2.64 or later

[Affected Scope] Jenkins Script Security Plugin 1.53 and earlier

[Impact] Attackers with Overall/Read permission can bypass the Groovy sandbox to execute arbitrary code on the Jenkins master JVM

[Mitigation] Immediately update the Script Security Plugin to version 1.54 or later, and restrict unnecessary user permissions

[Affected Scope] Microsoft SharePoint Server 2010, 2013, 2016, 2019, and SharePoint Foundation 2013

[Impact] Unauthenticated remote attackers can execute arbitrary code with the privileges of the SharePoint IIS application pool (w3wp.exe) by sending a specially crafted application package, leading to complete system compromise

[Mitigation] Immediately apply the official Microsoft security updates and perform compromise assessments on internet-facing SharePoint servers

[Affected Scope] Kaseya VSA R9.3 (before 9.3.0.35), R9.4 (before 9.4.0.36), and R9.5 (before 9.5.0.5)

[Impact] Unprivileged remote attackers can execute arbitrary PowerShell payloads with SYSTEM privileges on all managed endpoints

[Mitigation] Immediately upgrade Kaseya VSA servers to patched versions (9.3.0.35, 9.4.0.36, 9.5.0.5 or higher) and restrict external access

[Affected Scope] ConnectWise ManagedITSync integration through 2017 for Kaseya VSA with exposed ManagedIT.asmx page

[Impact] Unauthenticated remote attackers can execute arbitrary SQL queries (read/write) on the Kaseya VSA database, leading to full system compromise and ransomware deployment across all managed endpoints

[Mitigation] Immediately restrict external access to the ManagedIT.asmx page, apply official security patches, or disable the integration if not in use

[Affected Scope] GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08

[Impact] Local attackers can read and write Machine Specific Registers (MSRs) at the kernel level, enabling Driver Signature Enforcement (DSE) bypass and arbitrary Ring 0 code execution

[Mitigation] Immediately uninstall vulnerable GIGABYTE utilities or upgrade to patched versions, and enforce WDAC policies to block the loading of the vulnerable GDrv.sys driver

[Affected Scope] NoneCms V1.3 and underlying ThinkPHP 5.x framework-based web applications

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full control of the target server by sending crafted HTTP requests

[Mitigation] Upgrade the ThinkPHP framework to the latest secure version, apply patches to NoneCms, or deploy Web Application Firewall (WAF) rules

[Affected Scope] Jenkins weekly version 2.153 and earlier, LTS version 2.138.3 and earlier utilizing the Stapler web framework.

[Impact] Unauthenticated remote attackers can invoke arbitrary methods on Java objects by sending crafted URLs, leading to full Remote Code Execution (RCE) under system privileges.

[Mitigation] Immediately upgrade Jenkins weekly to version 2.154 or later, and LTS to version 2.138.4 or later.

[Affected Scope] Paessler PRTG Network Monitor versions prior to 18.2.40.1683

[Impact] Unauthenticated remote attackers can exploit a Local File Inclusion (LFI) vulnerability to create unauthorized accounts with administrative privileges, leading to full system compromise

[Mitigation] Immediately upgrade PRTG Network Monitor to version 18.2.40.1683 or later and restrict external access to the web console

[Affected Scope] All Java-based web applications utilizing RichFaces Framework versions 3.0.0 through 3.3.4.

[Impact] A remote, unauthenticated attacker can execute arbitrary system commands and fully compromise the host by sending a crafted chain of serialized Java objects.

[Mitigation] Migrate legacy RichFaces 3.X applications to supported frameworks, or restrict external access to the vulnerable '/org.ajax4jsf.resource.UserResource' path using WAF rules or servlet filters.

[Affected Scope] Tenda AC7 (firmware through V15.03.06.44_CN), AC9 (firmware through V15.03.05.19(6318)_CN), and AC10 (firmware through V15.03.06.23_CN)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending a crafted HTTP request, leading to complete device compromise

[Mitigation] Apply the latest official firmware updates immediately, disable WAN-side remote management, and restrict access to the web interface

[Affected Scope] Adobe ColdFusion 2018 (Release 2018.0.0.310739 and earlier), ColdFusion 2016 Update 6 and earlier, and ColdFusion 11 Update 14 and earlier

[Impact] Unauthenticated remote attackers can upload arbitrary executable files (such as .jsp) and execute them directly to achieve Remote Code Execution (RCE) with system privileges

[Mitigation] Immediately apply the official Adobe security patch (APSB18-33) and restrict execution permissions on publicly accessible upload directories

[Affected Scope] NUUO NVRmini network video recorder devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests

[Mitigation] Apply the latest firmware updates, restrict external internet access to the management interface, and implement firewall rules

[Affected Scope] MikroTik RouterOS versions 6.29 through 6.42 with the WinBox interface enabled

[Impact] Unauthenticated remote attackers can read arbitrary system files (including user credentials), and authenticated attackers can write arbitrary files, leading to complete device compromise

[Mitigation] Immediately upgrade RouterOS to patched versions (6.40.9, 6.42.1 or higher) and restrict or disable external WinBox port (8291) access

[Affected Scope] Drupal Core 7.x and 8.x versions (prior to 7.59, 8.5.3, and 8.4.8)

[Impact] Unauthenticated remote attackers can exploit multiple attack vectors to execute arbitrary code and fully compromise the target Drupal site

[Mitigation] Immediately upgrade Drupal Core to the patched versions (7.59, 8.5.3, 8.4.8, or higher)

[Affected Scope] Quest KACE System Management Appliance (SMA) 8.0.318 and prior versions

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with high privileges by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately and restrict external internet access to the management interface

[Affected Scope] Adobe ColdFusion 2016 Update 5 and earlier, ColdFusion 11 Update 13 and earlier

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting a deserialization of untrusted data (CWE-502)

[Mitigation] Immediately apply the official Adobe security patch (APSB18-14) and restrict external access to RMI and management ports

[Affected Scope] Dasan GPON home routers

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and gain full control of the device by sending specially crafted HTTP requests

[Mitigation] Apply the latest firmware updates from the vendor, disable external WAN-side management access, and restrict access to trusted networks

[Affected Scope] Dasan GPON home routers

[Impact] Attackers can completely bypass authentication to gain administrative control over the device, leading to unauthorized management and potential remote takeover

[Mitigation] Apply the latest firmware updates immediately and restrict external WAN access to the device management interface