CVE-2015-5477 is a vulnerability in ISC BIND that causes data processing errors when handling TKEY DNS resource record requests. This flaw can lead to a denial of service by causing the BIND DNS server (named) to exit unexpectedly due to an assertion failure triggered by specially crafted DNS queries. The vulnerability affects multiple Red Hat Enterprise Linux versions, and patches have been released to address the issue. Exploitation in the wild has been observed.
Apache Struts contains a command injection vulnerability identified as CVE-2016-3081. This flaw allows remote attackers to execute arbitrary code via the method:prefix parameter when Dynamic Method Invocation is enabled. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
ONLYOFFICE Docs Server has a path traversal vulnerability (CVE-2021-3199) that occurs when JSON Web Tokens (JWT) are used. The flaw involves a /.. sequence in an image upload parameter, which could allow an attacker to execute remote code on the server. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
ProFTPD contains an improper access control vulnerability that allows remote attackers to read and write arbitrary files using the site cpfr and site cpto commands. This vulnerability has been exploited in the wild and is considered high severity.
Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.
A high-severity vulnerability (CVE-2026-88779) affects Citrix NetScaler ADC and NetScaler Gateway products, including their FIPS variants. Multiple versions prior to 14.1-73.41, 13.1-64.28, and 13.1-37.282 are impacted. The vulnerability is publicly known but no confirmed exploits have been observed in the wild. No patch or remediation information is currently available.
A vulnerability in Zammad GmbH's Zammad DEB and RPM packages allows a local attacker with write privileges as the unprivileged zammad service account to escalate to full root privileges. This occurs because service processes temporarily run as root and execute files writable by the zammad account before dropping privileges. The affected services automatically restart without administrator intervention, enabling rapid privilege escalation. Only DEB and RPM package installations are affected; source and official container image installations are not impacted. All released packaged versions from 1.5.0 up to but not including 7.2.2 and 7.1.0-alpha are vulnerable.
Zammad versions 6.3.0 through 6.5.3 contain a session hijacking vulnerability that can lead to remote code execution as the zammad user. Versions 7.0.0 through 7.1.2 also contain the bug, but it is not exploitable due to framework changes. The vulnerability has a high severity with a CVSS 4.0 score of 8.7.
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.
A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.
This vulnerability is due to improper handling of URI encoding in an HTTP request, which allows the request to bypass an authentication rule that is intended to restrict access to a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted HTTP request to the API of the affected system. A successful exploit could allow the attacker to bypass authentication and gain access to the API as the admin user.
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.
A path traversal vulnerability affects WordPress version 7.0.2 and version 7.0.6, as well as versions prior to 7.1.2. This vulnerability could allow an attacker to access files outside the intended directory structure.
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. On affected builds the server dispatches the command, enabling unauthenticated creation, overwrite, and reconstruction of files in the RouterOS managed file namespace, including support files containing configuration and diagnostic data.This issue was fixed in versions: 6.49.21 (Long-term), 7.23.4 (Long-term) and 7.24.2 (Stable)