CVE Vulnerability Advisory Database

[Affected Scope] Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP1, and Sitefinity versions prior to 10.0.6412.0

[Impact] Attackers can compromise cryptographic protections to leak the MachineKey, perform arbitrary file uploads/downloads, execute XSS, or compromise ASP.NET ViewState to achieve Remote Code Execution (RCE)

[Mitigation] Upgrade to the latest secure version or manually configure a strong, unique DialogParametersEncryptionKey and MachineKey in web.config

[Affected Scope] PHPUnit versions before 4.8.28 and 5.x versions before 5.6.3

[Impact] Remote attackers can execute arbitrary PHP code and compromise the underlying server by accessing the exposed /vendor directory

[Mitigation] Upgrade PHPUnit to a secure version and restrict external HTTP access to the /vendor directory via web server configuration

[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.

[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.

[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.

[Affected Scope] SKYSEA Client View Ver.11.221.03 and earlier

[Impact] Remote attackers can bypass authentication to execute arbitrary system commands and gain full control over the target system

[Mitigation] Apply the official vendor security patch immediately and restrict network access to the management console ports

[Affected Scope] Samba versions from 3.5.0 onwards and before 4.6.4, 4.5.10, and 4.4.14

[Impact] An unauthenticated remote attacker can upload a malicious shared library (.so) to a writable share and force the server to load and execute it with root privileges

[Mitigation] Upgrade Samba to the patched versions (4.6.4, 4.5.10, 4.4.14 or later) or add 'nt pipe support = no' to the smb.conf configuration file as a temporary workaround

[Affected Scope] NETGEAR WNR2000v3 (before 1.1.2.14), WNR2000v4 (before 1.0.0.66), and WNR2000v5 (before 1.0.0.42) devices.

[Impact] Unauthenticated remote attackers can bypass authentication and execute arbitrary code with root privileges via a buffer overflow in the web administration interface.

[Mitigation] Apply the official firmware updates immediately and disable remote WAN management on the affected routers.

[Affected Scope] Hikvision DS-2CD2xx2F-I, DS-2CD2xx0F-I, DS-2CD2xx2FWD, DS-2CD4x2xFWD, DS-2CD4xx5, DS-2DFx, and DS-2CD63xx series IP camera devices

[Impact] Unauthenticated remote attackers can bypass authentication mechanisms via crafted HTTP requests to escalate privileges and gain unauthorized access to sensitive system configuration and credentials

[Mitigation] Immediately upgrade device firmware to the latest patched version and restrict access to the camera management interface from the public internet

[Affected Scope] Intel Active Management Technology (AMT), Standard Manageability (ISM), and Small Business Technology (SBT) firmware versions 6.x, 7.x, 8.x, 9.x, 10.x, and 11.x

[Impact] An unprivileged network or local attacker can bypass authentication to gain administrative system privileges and execute arbitrary code

[Mitigation] Apply the latest firmware updates provided by your system OEM, or disable AMT/ISM features and block associated ports immediately

[Affected Scope] Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 Update 11 and earlier, and ColdFusion 10 Update 22 and earlier.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by sending crafted Action Message Format (AMF) payloads.

[Mitigation] Apply the official Adobe security updates (APSB17-14) immediately and restrict external access to AMF gateway endpoints.

[Affected Scope] Netgear WN604 (before 3.3.3) and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, WNDAP660 (before 3.5.5.0)

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending crafted HTTP requests

[Mitigation] Apply the official firmware updates immediately, or restrict access to the web management interface from untrusted networks

[Affected Scope] Apache Tomcat versions before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12, when JmxRemoteLifecycleListener is enabled

[Impact] Remote attackers with network access to JMX ports can trigger untrusted deserialization without authentication, leading to arbitrary Remote Code Execution (RCE) with system privileges

[Mitigation] Upgrade Apache Tomcat to the latest secure release, or disable JmxRemoteLifecycleListener in server.xml and restrict network access to JMX ports using firewalls

[Affected Scope] MRLG (Multi-Router Looking Glass) versions prior to 5.5.0

[Impact] Unauthenticated remote attackers can trigger arbitrary memory writes and memory corruption, leading to remote code execution (RCE) or denial of service (DoS)

[Mitigation] Immediately upgrade to MRLG version 5.5.0 or later, and restrict access to the Looking Glass interface using firewalls or web server access controls

[Affected Scope] Microsoft Internet Information Services (IIS) 6.0 with WebDAV service enabled on Windows Server 2003 R2.

[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges and fully compromise the host by sending a specially crafted HTTP PROPFIND request.

[Mitigation] Since Windows Server 2003 is End-of-Life (EoL), immediately migrate to a supported OS version or disable the IIS WebDAV service.

[Affected Scope] Cisco IOS and IOS XE-based Catalyst switches and embedded service modules configured to accept Telnet connections and utilizing CMP

[Impact] Unauthenticated, remote attackers can execute arbitrary code with elevated privileges or cause a device reload by sending malformed CMP-specific Telnet options

[Mitigation] Apply official Cisco software updates immediately, or disable Telnet services and restrict VTY access using infrastructure ACLs

[Affected Scope] Web applications built on Apache Struts 2.3.x (before 2.3.32) and 2.5.x (before 2.5.10.1)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with system privileges via crafted HTTP headers such as Content-Type

[Mitigation] Immediately upgrade Apache Struts to a secure version (2.3.32, 2.5.10.1, or higher) and apply WAF rules to block malicious OGNL payloads

[Affected Scope] NETGEAR DGN2200 wireless ADSL2+ modem router devices running firmware versions up to and including 10.0.0.50.

[Impact] Remote authenticated attackers can execute arbitrary OS commands with root privileges via shell metacharacters in the ping_IPAddr parameter of HTTP POST requests, leading to complete device compromise.

[Mitigation] Apply the latest official firmware updates from NETGEAR, disable remote management, and restrict access to the web administration interface.

[Affected Scope] NETGEAR WNR2000v5 wireless routers.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending a specially crafted HTTP request.

[Mitigation] Immediately apply the official firmware update from the vendor and disable remote management interfaces.

[Affected Scope] All PHP web applications utilizing PHPMailer versions prior to 5.2.18

[Impact] Remote attackers can exploit the vulnerability to execute arbitrary code on the target server by manipulating the Sender (From) field

[Mitigation] Immediately upgrade the PHPMailer library to the latest stable version (5.2.18 or higher)

[Affected Scope] Adobe Flash Player 21.0.0.242 and earlier versions across Windows, macOS, Linux, and ChromeOS

[Impact] Remote attackers can execute arbitrary code and gain full system control via specially crafted malicious Flash content (SWF)

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), the only effective mitigation is to completely uninstall Flash Player from all systems

[Affected Scope] All Java applications utilizing Apache Shiro versions prior to 1.2.5

[Impact] Remote attackers can leverage the hardcoded default AES encryption key to send malicious serialized objects, leading to arbitrary code execution (RCE) or access control bypass

[Mitigation] Immediately upgrade Apache Shiro to version 1.2.5 or higher, and explicitly configure a unique, secure random cipher key for the RememberMe service