CVE Vulnerability Advisory Database

[Affected Scope] iOS/iPadOS before 15.2, macOS Monterey before 12.1, Safari before 15.2, tvOS before 15.2, watchOS before 8.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution on the target system.

[Mitigation] Immediately apply the official software updates provided by Apple to upgrade to the patched versions.

[Affected Scope] Apple iOS and iPadOS devices running versions prior to 14.8.1 or 15.1

[Impact] A malicious local application can exploit this vulnerability to execute arbitrary code with kernel privileges, leading to complete device compromise

[Mitigation] Immediately update affected devices to iOS/iPadOS 14.8.1, 15.1, or later versions

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 users)

[Impact] An authenticated remote attacker can send crafted SNMP packets to trigger a buffer overflow, causing a system reload (DoS) or executing arbitrary code with full administrative privileges

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required

[Affected Scope] Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0

[Impact] Unauthenticated remote attackers can retrieve sensitive information from device memory (including private keys and configuration data) by sending crafted IKEv1 negotiation requests

[Mitigation] Upgrade affected device firmware to the latest patched releases, or restrict access to UDP ports 500 and 4500 using infrastructure ACLs to trusted peers only

[Affected Scope] Cisco 871 Integrated Services Routers (ISR) running Cisco IOS 12.4 with the HTTP Administration component enabled.

[Impact] Remote attackers can execute arbitrary commands with privilege level 15 by tricking an authenticated administrator into visiting a malicious link, leading to complete device compromise.

[Mitigation] Disable the HTTP/HTTPS server on the router, restrict access using IP-based Access Control Lists (ACLs), or upgrade to a patched Cisco IOS release.

[Affected Scope] Cisco IOS 12.2(15) and earlier versions

[Impact] Remote attackers can cause a denial of service (refused VTY connections) by exhausting virtual terminal resources using crafted TCP connection requests

[Mitigation] Upgrade to a patched Cisco IOS release, disable Telnet in favor of SSH, and restrict VTY access using Access Control Lists (ACLs)