Threats tagged 'cisa-kev'

A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

Draytek VigorConnect has a path traversal vulnerability in its WebServlet file download functionality. This flaw allows an unauthenticated attacker to download arbitrary files from the underlying operating system with root privileges. The vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information are provided.

Draytek VigorConnect has a path traversal vulnerability in the DownloadFileServlet endpoint that allows unauthenticated attackers to download arbitrary files from the underlying operating system with root privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2021-31196 is a high-severity information disclosure vulnerability in Microsoft Exchange Server that has been exploited in the wild. It allows an attacker to remotely execute code on affected systems. No specific affected versions or patch information is provided in the available data.

Dahua IP cameras and related products have an authentication bypass vulnerability identified as CVE-2021-33044. This flaw occurs when the NetKeyboard type argument is specified by the client during authentication, allowing bypass of normal authentication controls. The vulnerability is known to be exploited in the wild and is rated with high severity. No specific affected versions or patch information is provided in the available data.

CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel's legacy_parse_param function within the Filesystem Context functionality. This flaw allows an attacker to open a filesystem that does not support the Filesystem Context API, potentially leading to privilege escalation. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Dahua IP cameras and related products have an authentication bypass vulnerability that occurs when the client specifies the loopback device during authentication. This flaw allows attackers to bypass authentication controls. The vulnerability is known to be exploited in the wild and is classified as high severity. No specific affected versions or patch information is provided.

Red Hat has released a security advisory for kernel live patch modules kpatch-patch-4_18_0-372_87_1 and kpatch-patch-4_18_0-372_91_1 targeting kernel version 4.18.0-372.87.1.el8_6. The update addresses three vulnerabilities: a use-after-free (UAF) in network route management (CVE-2024-36971) and two denial of service issues related to virtio-net tap and tun interfaces with mlx5_core short frames (CVE-2024-41090 and CVE-2024-41091). These vulnerabilities affect Red Hat Enterprise Linux 8.6 versions prior to 8.6.372.91. The advisory rates the impact as Important (high severity) and provides updated patch packages to remediate these issues.

Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library. The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.   However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.