CVE Vulnerability Advisory Database

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1052

[Impact] Unauthenticated remote attackers can exploit path traversal to write arbitrary files with system authority, leading to Remote Code Execution (RCE)

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1052 or later and restrict external access

[Affected Scope] SysAid On-Prem versions <= 23.3.40

[Impact] Unauthenticated remote attackers can exploit the Server URL processing logic to read arbitrary files, hijack administrator accounts, and potentially achieve Remote Code Execution (RCE)

[Mitigation] Immediately upgrade SysAid On-Prem to the patched version (24.40.60 or higher) and restrict external access to the application

[Affected Scope] Craft CMS versions 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code on the target server via crafted HTTP requests, leading to complete system compromise.

[Mitigation] Immediately upgrade your Craft CMS installation to the patched versions (3.9.15, 4.14.15, or 5.6.17) depending on your major version branch.

[Affected Scope] Commvault Command Center Innovation Release versions 11.38.0 through 11.38.20.

[Impact] Unauthenticated remote attackers can upload malicious ZIP installation packages to execute arbitrary code (RCE) via path traversal and JSP web shell deployment.

[Mitigation] Immediately upgrade to patched versions: 11.38.20 with SP38-CU20-433/436 or 11.38.25 with SP38-CU25-434/438 or higher.

[Affected Scope] Erlang/OTP versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20

[Impact] Unauthenticated remote attackers can exploit a flaw in SSH protocol message handling to execute arbitrary commands and gain full system control without valid credentials

[Mitigation] Immediately upgrade Erlang/OTP to patched versions (OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20) or temporarily disable the SSH server and restrict access via firewall rules

[Affected Scope] Yii 2 framework versions prior to 2.0.52

[Impact] Remote attackers can execute arbitrary PHP code on the server and fully compromise the system via specially crafted requests.

[Mitigation] Immediately upgrade the Yii2 framework to the patched version 2.0.52 or higher.

[Affected Scope] Langflow versions prior to 1.3.0

[Impact] A remote, unauthenticated attacker can execute arbitrary Python code and fully compromise the host system by sending crafted HTTP requests.

[Mitigation] Immediately upgrade Langflow to version 1.3.0 or later, and restrict external access to the vulnerable endpoint.

[Affected Scope] CrushFTP 10 before 10.8.4 and CrushFTP 11 before 11.3.1

[Impact] Unauthenticated attackers can bypass authentication via HTTP(S) ports to take over the 'crushadmin' account and fully compromise the system

[Mitigation] Immediately upgrade CrushFTP to version 10.8.4 / 11.3.1 or later, and enforce DMZ proxy configurations

[Affected Scope] Gladinet CentreStack versions through 16.1.10296.56315

[Impact] Unauthenticated remote code execution (RCE) via deserialization of malicious payloads using the hardcoded machineKey, actively exploited in the wild

[Mitigation] Immediately upgrade to version 16.4.10315.56368 or later, or manually delete/rotate the hardcoded machineKey in the portal web.config file

[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)

[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces

[Affected Scope] Kentico Xperience through version 13.0.178 with Staging Sync Server enabled

[Impact] Unauthenticated attackers can bypass authentication to control administrative objects, leading to full Remote Code Execution (RCE)

[Mitigation] Apply the official Kentico hotfix immediately and restrict external access to the Staging Sync Server endpoint

[Affected Scope] Kentico Xperience versions up to and including 13.0.172

[Impact] Attackers can bypass authentication to gain administrative control, potentially leading to full system compromise and Remote Code Execution (RCE)

[Mitigation] Apply the official hotfix immediately, or restrict access to the Staging Sync Server endpoint via IP whitelisting

[Affected Scope] Devices running iOS 15/16/17/18, iPadOS, macOS Sequoia, visionOS, watchOS, and Safari browser

[Impact] Processing maliciously crafted web content may allow an attacker to break out of the Web Content sandbox and execute arbitrary code, with active exploitation reported in targeted attacks

[Mitigation] Immediately apply the official security updates released by Apple, including iOS 18.3.2 and macOS 15.3.2

[Affected Scope] Apache Tomcat versions 11.0.0-M1 through 11.0.2, 10.1.0-M1 through 10.1.34, 9.0.0.M1 through 9.0.98, and EOL 8.5.0 through 8.5.100.

[Impact] Attackers can bypass path validation via internal dot path equivalence, allowing them to inject malicious content into sensitive files or trigger remote code execution (RCE) via session deserialization.

[Mitigation] Immediately upgrade to patched versions (11.0.3, 10.1.35, or 9.0.99) and ensure the Default Servlet's 'readonly' parameter is set to 'true'.

[Affected Scope] Edimax IC-7100 IP camera devices

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges and fully compromise the device by sending specially crafted HTTP requests

[Mitigation] Apply official vendor patches immediately, or restrict management interface access from the public internet and isolate the affected devices

[Affected Scope] XWiki Platform versions prior to 15.10.11, 16.4.1, and 16.5.0RC1

[Impact] Unauthenticated remote attackers can execute arbitrary Groovy code via the SolrSearch API, leading to complete compromise of the host system.

[Mitigation] Immediately upgrade to patched versions (15.10.11, 16.4.1, 16.5.0RC1 or later) or apply the recommended XML macro workaround.

[Affected Scope] SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC)

[Impact] A remote unauthenticated attacker can exploit a deserialization of untrusted data vulnerability to execute arbitrary OS commands on the target system

[Mitigation] Immediately apply the official security patches provided by SonicWall and restrict external access to the management consoles

[Affected Scope] Aviatrix Controller versions prior to 7.1.4191 and 7.2.x versions prior to 7.2.4996

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by injecting shell metacharacters, leading to complete system compromise

[Mitigation] Immediately upgrade Aviatrix Controller to patched versions (7.1.4191, 7.2.4996 or higher) and restrict access to the management interface

[Affected Scope] DrayTek Vigor2960 and Vigor300B gateway devices running firmware version 1.5.1.4 or prior

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges via the Web Management Interface, leading to full system compromise

[Mitigation] Immediately upgrade to firmware version 1.5.1.5 or higher and disable WAN-side web management access

[Affected Scope] Craft CMS versions 3.x, 4.x, and 5.x running on environments where 'register_argc_argv' is enabled in php.ini

[Impact] Unauthenticated remote attackers can execute arbitrary PHP code and gain full system control by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Craft CMS to patched versions (3.9.14, 4.13.2, or 5.5.2 or higher) and disable 'register_argc_argv' in php.ini