Threat database

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

JQuery contains a persistent cross-site scripting (XSS) vulnerability that allows execution of untrusted code in the user's browser when maliciously formed input enclosed in HTML tags is processed by JQuery's DOM manipulators. This vulnerability has been exploited in the wild and is considered high severity.

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requests on the backend server that hosts the repository application. The fixed versions are August 2023 Patch 2, May 2023 Patch 6, February 2023 Patch 10, November 2022 Patch 12, August 2022 Patch 14, May 2022 Patch 16, February 2022 Patch 15, and November 2021 Patch 17. NOTE: this issue exists because of an incomplete fix for CVE-2023-41265.

CVE-2020-2883 is an unspecified vulnerability in Oracle WebLogic Server that can be exploited by unauthenticated attackers with network access via IIOP or T3 protocols. The vulnerability is known to be exploited in the wild. Oracle has released security patches addressing this and other vulnerabilities in their April 2020 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.

Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.

A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a path traversal attack, due to insufficient input validation. A successful exploit could allow unauthorized access, enabling the attacker to view, corrupt, or delete users' data and system configurations.

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.

A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to send a malicious packet through the data plane of the firewall that reboots the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode.

A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a remote unauthenticated attacker to achieve remote code execution.

Acclaim Systems USAHERDS contains a hard-coded credentials vulnerability that can enable an attacker to achieve remote code execution on the affected system. Exploitation requires obtaining the MachineKey through another vulnerability or channel. This vulnerability is known to be exploited in the wild and is classified as high severity.

The Reolink RLC-410W IP camera has an authenticated OS command injection vulnerability in its network settings functionality. This vulnerability allows an attacker with valid credentials to execute arbitrary operating system commands on the device. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.

Multiple Reolink IP camera models have an authenticated OS command injection vulnerability that allows an admin user to execute arbitrary commands as root via the 'TestEmail' feature. This vulnerability affects models including RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W. Exploitation requires authentication but can lead to full system compromise. The vulnerability is known to be exploited in the wild.

NUUO NVRmini2 devices have a missing authentication vulnerability that permits unauthenticated attackers to upload encrypted TAR archives. This flaw can be exploited to add arbitrary users to the device, potentially compromising device security. The vulnerability is classified as high severity and has been exploited in the wild. No specific affected versions or patch information is provided.

NUUO NVRmini devices have an OS command injection vulnerability identified as CVE-2018-14933. This flaw allows remote attackers to execute arbitrary commands on the device by injecting shell metacharacters into the uploaddir parameter of the writeuploaddir command. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.