CVE Vulnerability Advisory Database

[Affected Scope] D-Link DIR-505 firmware version 1.10B02 and prior

[Impact] Unauthenticated remote attackers can execute arbitrary system commands or gain full control of the device by sending crafted filenames via TFTP

[Mitigation] Disable the vulnerable TFTP service immediately, restrict access via firewall rules, and upgrade to a patched firmware or replace the legacy device

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)

[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway versions 13.1, 14.1, 13.1-FIPS, and NDcPP configured with Gateway/AAA virtual servers, IPv6-bound HTTP/SSL/HTTP_QUIC LB virtual servers, or HDX-type CR virtual servers

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted network packets, leading to Remote Code Execution (RCE) or complete Denial of Service (DoS) of the appliance

[Mitigation] Immediately upgrade to the patched versions recommended in Citrix Advisory CTX694938, restrict external access, and audit system logs for indicators of compromise

[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

[Impact] Unauthenticated remote attackers can trigger a memory overflow by sending crafted packets, leading to control flow hijacking, Remote Code Execution (RCE), or Denial of Service (DoS)

[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Citrix, and restrict access to exposed gateway interfaces until patched

[Affected Scope] Apple iOS and iPadOS prior to 18.4.1, macOS Sequoia prior to 15.4.1, tvOS prior to 18.4.1, visionOS prior to 2.4.1, and watchOS prior to 11.5

[Impact] Processing a maliciously crafted media file containing an audio stream may lead to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately apply the official software updates provided by Apple to patch the vulnerability

[Affected Scope] F5 BIG-IP versions 16.0.x, 15.1.x, 14.1.x, 13.1.x, and 12.1.x prior to patched releases

[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted URI requests, leading to TMM Denial of Service (DoS), URL-based access control bypass, or potential Remote Code Execution (RCE)

[Mitigation] Immediately upgrade to the designated hotfix/patched versions recommended by F5, or apply temporary traffic filtering workarounds

[Affected Scope] D-Link DIR-825 R1 devices running firmware versions up to 3.0.1 before 2020-11-20

[Impact] Remote unauthenticated attackers can execute arbitrary code with root privileges by sending crafted HTTP requests, leading to complete device compromise

[Mitigation] Apply the latest official firmware patch immediately, disable WAN-side remote management, or replace end-of-life hardware

[Affected Scope] Microsoft Windows 10 (versions 1903, 1909) and Windows Server (versions 1903, 1909) running the SMBv3 (Server Message Block 3.1.1) protocol

[Impact] Unauthenticated remote attackers can execute arbitrary code with kernel privileges (RCE) or escalate local privileges (LPE) by sending specially crafted packets, enabling wormable self-propagation across networks

[Mitigation] Apply official Microsoft security patches immediately, or implement workarounds such as disabling SMBv3 compression and blocking inbound TCP port 445

[Affected Scope] Cisco IOS and IOS XE Software with the Quality of Service (QoS) subsystem enabled and listening on UDP port 18999.

[Impact] An unauthenticated, remote attacker can execute arbitrary code with elevated privileges or cause a denial of service (DoS) condition via device reload.

[Mitigation] Apply official Cisco software updates, or restrict access to UDP port 18999 using Infrastructure Access Control Lists (iACLs).

[Affected Scope] All architectures and devices running MikroTik RouterOS before versions 6.41.3 or 6.42rc27

[Impact] Unauthenticated remote attackers can trigger a buffer overflow via crafted NetBIOS session requests, leading to full remote code execution with administrative privileges

[Mitigation] Immediately upgrade RouterOS to the latest stable release (6.41.3+ or 6.42rc27+) and disable the SMB service if it is not business-critical

[Affected Scope] PAN-OS versions before 6.1.19, 7.0.19, 7.1.14, and 8.0.6 management interface

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via the management interface, leading to complete device compromise

[Mitigation] Immediately upgrade to the patched versions and restrict access to the management interface from the public internet

[Affected Scope] Cisco network devices running Cisco IOS Software versions 12.2 through 15.6 or Cisco IOS XE Software with the DHCP relay subsystem enabled.

[Impact] An unauthenticated, remote attacker can execute arbitrary code with full system privileges (RCE) or trigger a system reload, causing a complete Denial of Service (DoS).

[Mitigation] Apply the official Cisco software updates immediately, or implement access control lists (ACLs) to block unauthorized DHCPv4 traffic and disable DHCP relay where not required.

[Affected Scope] MRLG (Multi-Router Looking Glass) versions prior to 5.5.0

[Impact] Unauthenticated remote attackers can trigger arbitrary memory writes and memory corruption, leading to remote code execution (RCE) or denial of service (DoS)

[Mitigation] Immediately upgrade to MRLG version 5.5.0 or later, and restrict access to the Looking Glass interface using firewalls or web server access controls

[Affected Scope] Adobe Flash Player through 13.0.0.262, 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X, and through 11.2.202.438 on Linux

[Impact] Remote attackers can execute arbitrary code with the privileges of the active user and compromise the host system by enticing users to visit a website containing malicious Flash content (SWF)

[Mitigation] Since Adobe Flash Player has reached End-of-Life (EOL), it is highly recommended to completely uninstall Flash Player from all endpoints and disable Flash plugins in web browsers

[Affected Scope] Systems running Microsoft Forefront Threat Management Gateway (TMG) 2010 Firewall Client

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges via crafted network requests

[Mitigation] Apply the official Microsoft MS11-040 security update immediately or disable the Firewall Client service

[Affected Scope] Mozilla Firefox 3.5.x through 3.5.14, 3.6.x through 3.6.11, Thunderbird 3.0.x through 3.0.9, 3.1.x through 3.1.5, and SeaMonkey 2.0.x through 2.0.9 with JavaScript enabled

[Impact] Remote attackers can trigger memory corruption and execute arbitrary code with the privileges of the logged-in user by enticing them to visit a specially crafted webpage

[Mitigation] Immediately upgrade to patched versions (Firefox 3.5.15/3.6.12, Thunderbird 3.0.10/3.1.6, SeaMonkey 2.0.10 or later) or disable JavaScript as a temporary workaround

[Affected Scope] Microsoft Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 Pre-Beta

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system via crafted RPC requests

[Mitigation] Apply the official Microsoft security patch (MS08-067) immediately and restrict external access to SMB ports (TCP 139/445)