CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
ServiceNow Now Platform Input Validation Vulnerability Leading to Remote Code Execution (CVE-2024-5217)
[Affected Scope] ServiceNow Now Platform Washington DC, Vancouver, and earlier releases
[Impact] An unauthenticated remote attacker can execute arbitrary code within the context of the Now Platform due to improper input validation
[Mitigation] Apply the official security patches and hotfixes released during the June 2024 patching cycle immediately
ServiceNow Now Platform Input Validation Vulnerability Leading to Remote Code Execution (CVE-2024-4879) Security Advisory
[Affected Scope] ServiceNow Now Platform Vancouver and Washington DC releases
[Impact] Unauthenticated remote attackers can execute arbitrary code within the context of the Now Platform, potentially leading to full system compromise
[Mitigation] Apply official security patches and hotfixes immediately, and restrict external access for self-hosted instances while monitoring for IoCs
QNAP QTS and Photo Station Remote Code Execution (RCE) Vulnerability due to Improper Input Validation (CVE-2019-7193)
[Affected Scope] QNAP QTS operating system and Photo Station application
[Impact] Unauthenticated remote attackers can inject arbitrary system commands via crafted HTTP requests, leading to complete system compromise
[Mitigation] Immediately update QTS and Photo Station to the latest patched versions recommended by QNAP