CVE Vulnerability Advisory Database

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions

[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.24

[Impact] Unauthenticated remote attackers can leverage default settings of the Autorun directory to import and execute arbitrary Bash or PowerShell commands on the host system, leading to full system compromise.

[Mitigation] Immediately upgrade to the patched version (5.8.0.24 or higher) and restrict access to exposed management interfaces.

[Affected Scope] Zyxel ATP, USG FLEX, USG FLEX 50(W), and USG20(W)-VPN series running firmware versions V5.00 through V5.38

[Impact] Unauthenticated remote attackers can download or upload arbitrary files via crafted URLs, potentially leading to full system compromise and remote code execution

[Mitigation] Immediately upgrade to firmware version V5.39 or later, and restrict external access to the web management interface

[Affected Scope] CyberPanel versions through 2.3.6 and unpatched 2.3.7

[Impact] Remote attackers can bypass authentication and execute arbitrary system commands with root privileges

[Mitigation] Immediately upgrade CyberPanel to the latest secure commit (5b08cd6 or later) and restrict access to the management port

[Affected Scope] CyberPanel versions through 2.3.6 and unpatched 2.3.7

[Impact] Remote attackers can bypass authentication and execute arbitrary system commands with root privileges via shell metacharacters

[Mitigation] Immediately upgrade CyberPanel to the latest commit (1c0c6cb or later) and restrict access to the management port

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.21

[Impact] Unauthenticated remote attackers can upload and download arbitrary files, potentially leading to full Remote Code Execution (RCE) on the target server

[Mitigation] Immediately upgrade to version 5.8.0.21 or later, and restrict external access to the file transfer interfaces

[Affected Scope] Multiple versions of FortiManager and FortiManager Cloud (7.6.0, 7.4.0-7.4.4, 7.2.0-7.2.7, 7.0.0-7.0.12, 6.4.0-6.4.14, 6.2.0-6.2.12, etc.)

[Impact] An unauthenticated remote attacker can execute arbitrary code or system commands via specially crafted requests, potentially leading to full system compromise

[Mitigation] Immediately upgrade to the official patched versions or apply workarounds to restrict unauthorized FGFM connections

[Affected Scope] NuPoint Unified Messaging (NPM) component within Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201)

[Impact] Unauthenticated remote attackers can exploit insufficient input validation to perform path traversal, allowing unauthorized access to view, corrupt, or delete user data and system configurations

[Mitigation] Immediately upgrade to the latest patched version provided by the vendor, and restrict external access to management interfaces

[Affected Scope] ScienceLogic SL1 (formerly EM7) versions prior to 12.1.3, 12.2.3, and 12.3, including older lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x

[Impact] Unauthenticated remote attackers can exploit an unspecified third-party component packaged with SL1 to execute arbitrary commands and gain full system control

[Mitigation] Immediately upgrade to patched SL1 versions (12.1.3+, 12.2.3+, 12.3+) or apply the corresponding hotfixes for your specific version line

[Affected Scope] Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0

[Impact] An attacker can achieve arbitrary remote code execution (RCE) within the browser's content process, with active exploitation reported in the wild

[Mitigation] Immediately update all affected installations to the latest patched versions (Firefox 131.0.2+, ESR 128.3.1+, ESR 115.16.1+, Thunderbird 131.0.1+, 128.3.1+, 115.16.0+)

[Affected Scope] All supported versions of Microsoft Configuration Manager (formerly SCCM)

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the target server and backend database by sending specially crafted requests, leading to full system compromise

[Mitigation] Immediately apply the latest cumulative updates (KB) via the Configuration Manager console and restrict database access

[Affected Scope] Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1

[Impact] Unauthenticated remote attackers can execute arbitrary system commands and fully compromise the target server by sending specially crafted inputs to the postjournal service.

[Mitigation] Immediately upgrade Zimbra to the latest patched versions (8.8.15 P46, 9.0.0 P41, 10.0.9, 10.1.1 or later), or disable the postjournal service if not required.

[Affected Scope] VMware vCenter Server versions 7.0 and 8.0, VMware Cloud Foundation versions 4.x and 5.x

[Impact] An unauthenticated remote attacker can trigger a heap overflow via specially crafted DCERPC packets, potentially executing arbitrary code with root privileges

[Mitigation] Immediately apply the official Broadcom security patches (vCenter 8.0 U3b / 7.0 U3s or later) and restrict network access to vCenter management ports

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and prior versions

[Impact] Remote unauthenticated attackers can exploit hardcoded credentials to access internal functionality and modify sensitive data.

[Mitigation] Immediately apply the official SolarWinds 12.8.3 Hotfix 2 or later, and restrict external network access.

[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)

[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)

[Affected Scope] SolarWinds Web Help Desk (WHD) 12.8.3 and all prior versions

[Impact] Successful exploitation allows remote attackers to execute arbitrary commands on the host machine via unsafe Java deserialization, potentially leading to full system compromise

[Mitigation] Immediately apply the official SolarWinds Web Help Desk 12.8.3 Hotfix 1 or upgrade to the latest patched version

[Affected Scope] Samsung MagicINFO 9 Server versions prior to 21.1050

[Impact] Unauthenticated remote attackers can write arbitrary files with SYSTEM authority, potentially leading to Remote Code Execution (RCE).

[Mitigation] Immediately upgrade MagicINFO 9 Server to version 21.1050 or later, and restrict external network access.

[Affected Scope] Apache OFBiz versions up to and including 18.12.14

[Impact] Unauthenticated remote attackers can execute arbitrary screen rendering code and system commands by sending specially crafted HTTP requests

[Mitigation] Immediately upgrade Apache OFBiz to the latest stable version 18.12.15 or higher

[Affected Scope] ServiceNow Now Platform Washington DC, Vancouver, and earlier releases

[Impact] An unauthenticated remote attacker can execute arbitrary code within the context of the Now Platform due to improper input validation

[Mitigation] Apply the official security patches and hotfixes released during the June 2024 patching cycle immediately

[Affected Scope] ServiceNow Now Platform Vancouver and Washington DC releases

[Impact] Unauthenticated remote attackers can execute arbitrary code within the context of the Now Platform, potentially leading to full system compromise

[Mitigation] Apply official security patches and hotfixes immediately, and restrict external access for self-hosted instances while monitoring for IoCs