CVE Vulnerability Advisory Database

[Affected Scope] Systems running VMware vCenter Server with the built-in Syslog server service enabled.

[Impact] A remote, unauthenticated attacker with network access can exploit this directory traversal vulnerability to execute arbitrary code and fully compromise the vCenter Server.

[Mitigation] Immediately apply the official security patches provided by Broadcom and restrict network access to Syslog ports (UDP/TCP 514).

[Affected Scope] FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, and FortiNAC-F devices with FortiCloud SSO authentication enabled

[Impact] An attacker with a valid FortiCloud account and a registered device can bypass authentication to log into other registered devices under different accounts, gaining full administrative control (CVSS 9.8, Active KEV)

[Mitigation] Immediately upgrade to the patched firmware versions or disable FortiCloud SSO administrator login on all affected devices

[Affected Scope] FortiOS 7.0.0-7.0.17 / 7.2.0-7.2.11 / 7.4.0-7.4.8 / 7.6.0-7.6.3, FortiProxy 7.0.0-7.0.21 / 7.2.0-7.2.14 / 7.4.0-7.4.10 / 7.6.0-7.6.3, FortiSwitchManager 7.0.0-7.0.5 / 7.2.0-7.2.6.

[Impact] An unauthenticated remote attacker can bypass FortiCloud SSO authentication via a crafted SAML response message, gaining full administrative access to the affected device.

[Mitigation] Immediately upgrade to the patched firmware versions, or disable FortiCloud SSO login and restrict administrative access to trusted IP addresses as a temporary workaround.

[Affected Scope] Control Web Panel (CWP, formerly CentOS Web Panel) versions prior to 0.9.8.1205

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) on the target server by injecting shell metacharacters into the 't_total' parameter of a 'changePerm' request, provided a valid non-root username is known

[Mitigation] Immediately upgrade CWP to version 0.9.8.1205 or higher, and restrict access to the CWP management ports using firewall rules

[Affected Scope] Cleo Harmony, VLTrader, and LexiCom versions prior to 5.8.0.21

[Impact] Unauthenticated remote attackers can upload and download arbitrary files, potentially leading to full Remote Code Execution (RCE) on the target server

[Mitigation] Immediately upgrade to version 5.8.0.21 or later, and restrict external access to the file transfer interfaces

[Affected Scope] All default installations of GeoServer prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2

[Impact] Unauthenticated remote attackers can execute arbitrary system commands on the host server via manipulated OGC request parameters

[Mitigation] Immediately upgrade to patched versions (2.22.6, 2.23.6, 2.24.4, 2.25.2 or higher) or apply the workaround by removing the 'gt-complex' JAR file

[Affected Scope] Rejetto HTTP File Server (HFS) up to and including version 2.3m

[Impact] Unauthenticated remote attackers can execute arbitrary commands on the host system by sending a specially crafted HTTP request

[Mitigation] Immediately discontinue the use of HFS 2.x, migrate to the completely redesigned HFS 3, or restrict network access

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60

[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)

[Affected Scope] All versions of CrushFTP prior to 10.7.1 and 11.1.0 across all operating system platforms

[Impact] Unauthenticated remote attackers can bypass the VFS Sandbox, read arbitrary files from the filesystem, bypass authentication to gain administrative access, and execute arbitrary code on the server.

[Mitigation] Immediately upgrade CrushFTP to the patched versions (10.7.1 or 11.1.0 or higher) and apply WAF rules to block template injection payloads.

[Affected Scope] ConnectWise ScreenConnect versions 23.9.7 and prior

[Impact] Attackers can bypass authentication to create administrative accounts, leading to full system compromise and Remote Code Execution (RCE) [1, 1.1]

[Mitigation] Immediately upgrade to the patched version (23.9.8 or higher) and restrict external access to the management interface

[Affected Scope] All MOVEit Transfer versions prior to 2021.0.6, 2021.1.4, 2022.0.4, 2022.1.5, and 2023.0.1, including older unsupported versions

[Impact] Unauthenticated remote attackers can manipulate the database via HTTP/HTTPS requests, potentially leading to remote code execution (RCE) and unauthorized data exfiltration

[Mitigation] Immediately upgrade to the patched versions, restrict external HTTP/HTTPS access to the server, and conduct a thorough compromise assessment

[Affected Scope] Ruckus Wireless Admin and AP controller devices running version 10.4 or lower

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending a specially crafted HTTP GET request

[Mitigation] Immediately apply the official vendor firmware patches and restrict access to the management interface from the public internet

[Affected Scope] GLPI versions up to and including 10.0.2, specifically within the bundled htmLawed module

[Impact] Unauthenticated remote attackers can inject and execute arbitrary PHP code, leading to full system compromise

[Mitigation] Immediately upgrade GLPI to version 10.0.3 or higher, or delete the vulnerable test script (htmLawedTest.php)

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] Zyxel USG FLEX, ATP, and VPN series firewalls running vulnerable firmware versions (with ZTP enabled)

[Impact] Unauthenticated remote attackers can execute arbitrary OS commands with root privileges by sending crafted HTTP POST requests, leading to complete device compromise

[Mitigation] Immediately upgrade to the patched firmware versions recommended by Zyxel and restrict external access to the management interface

[Affected Scope] Mitel MiVoice Connect through 19.2 SP3 Service Appliances (SA 100, SA 400, and Virtual SA).

[Impact] Unauthenticated remote attackers can exploit incorrect data validation to execute arbitrary code and gain full control over the affected appliance.

[Mitigation] Apply the official security patches immediately and restrict access to the management interfaces from the public internet.

[Affected Scope] Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise via the SSL VPN gateway

[Mitigation] Immediately upgrade to the latest patched firmware versions provided by Cisco, and restrict access to the SSL VPN port from untrusted networks

[Affected Scope] Zoho ManageEngine ServiceDesk Plus (before 11306), ServiceDesk Plus MSP (before 10530), and SupportCenter Plus (before 11014).

[Impact] Unauthenticated remote attackers can bypass authentication to upload and execute malicious files, gaining full system-level control over the target server.

[Mitigation] Immediately apply the official vendor patches, restrict external access to vulnerable endpoints, and perform a comprehensive log audit for Indicators of Compromise (IoCs).

[Affected Scope] SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before version 15.2.3 HF2

[Impact] Unauthenticated remote attackers can exploit this vulnerability to gain SYSTEM-level privileged access and execute arbitrary code on the host machine

[Mitigation] Immediately upgrade to Serv-U version 15.2.3 HF2 or later, and restrict external access to the service ports