Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
394 results · page 5 of 8
May 22, 2024A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and CiCVE-2024-20355 · Network & remote access · Cisco · reported by psirt@cisco.comMedium 5
A vulnerability in the implementation of SAML 2.0 single sign-on (SSO) for remote access VPN services in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to successfully establish a VPN session on an affected device. This vulnerability is due to improper separation of authorization domains when using SAML authentication. An attacker could exploit this vulnerability by using valid credentials to successfully authenticate using their designated connection profile (tunnel group), intercepting the SAML SSO token that is sent back from the Cisco ASA device, and then submitting the same SAML SSO token to a different tunnel group for authentication. A successful exploit could allow the attacker to establish a remote access VPN session using a connection profile that they are not authorized to use and connect to secured networks behind the affected device that they are not authorized to access. For successful exploitation, the attacker must have valid remote access VPN user credentials.
- Product
- Cisco Adaptive Security Appliance (ASA) Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec.cloudapps.cisco.comsec.cloudapps.cisco.com
May 16, 2024An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited.CVE-2024-3640 · Other software · Rockwell Automation · reported by PSIRT@rockwellautomation.comHigh 7
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executable and run it as a System user. A threat actor needs admin privileges to exploit this vulnerability.
- Product
- FactoryTalk® Remote Access™
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordrockwellautomation.comrockwellautomation.com
May 14, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-30039 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30029 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30024 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30023 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30022 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30015 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30014 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 14, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30009 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-28902 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-28901 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-28900 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-26255 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-26217 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityCVE-2024-26211 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 7.8
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Remote Access Connection Manager Information Disclosure VulnerabilityCVE-2024-26207 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comMedium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-26205 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-26200 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 9, 2024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-26179 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Apr 8, 2024Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat witCVE-2024-28224 · Other software · Ollama · reported by MITREMedium 6.6
Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).
- Product
- Ollama
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comresearch.nccgroup.com
Mar 9, 2024A command injection vulnerability exists in local RACADM.CVE-2024-25951 · Other software · Dell · reported by security_alert@emc.comHigh 8
A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.
- Product
- Integrated Dell Remote Access Controller 8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 7, 2024Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access.CVE-2024-25729 · Other software · arris · reported by MITREHigh 8.8
Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last octet.)
- Product
- sbg6580
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2024Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process.CVE-2024-25616 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comLow 3.7
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x.CVE-2024-25615 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.3
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS.CVE-2024-25614 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comMedium 5.5
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the controller.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.CVE-2024-25613 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.2
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.CVE-2024-25612 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.2
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.CVE-2024-25611 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.2
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Mar 5, 2024Authenticated command injection vulnerabilities exist in the ArubaOS command line interface.CVE-2024-1356 · Other software · Hewlett Packard Enterprise (HPE) · reported by security-alert@hpe.comHigh 7.2
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.
- Product
- ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarubanetworks.comarubanetworks.com
Feb 7, 2024IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access.CVE-2023-43017 · Other software · IBM · reported by psirt@us.ibm.comHigh 8.2
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force ID: 266155.
- Product
- Security Verify Access Appliance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexchange.xforce.ibmcloud.comibm.com
Jan 20, 2024Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.CVE-2024-23726 · Other software · Ubeeinteractive · reported by MITREHigh 8.8
Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame. A PSK is generated by using the first six characters of the SSID and the last six of the BSSID, decrementing the last digit.
- Product
- Ddw365 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 27, 2023Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.CVE-2023-40038 · Other software · Arris · reported by MITREHigh 8.8
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
- Product
- Dg860a Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comi.ebayimg.com
Nov 1, 2023A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security AppCVE-2023-20264 · Network & remote access · Cisco · reported by psirt@cisco.comMedium 6.1
A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to intercept the SAML assertion of a user who is authenticating to a remote access VPN session. This vulnerability is due to insufficient validation of the login URL. An attacker could exploit this vulnerability by persuading a user to access a site that is under the control of the attacker, allowing the attacker to modify the login URL. A successful exploit could allow the attacker to intercept a successful SAML assertion and use that assertion to establish a remote access VPN session toward the affected device with the identity and permissions of the hijacked user, resulting in access to the protected network.
- Product
- Cisco Adaptive Security Appliance (ASA) Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec.cloudapps.cisco.comsec.cloudapps.cisco.com
Nov 1, 2023A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software couldCVE-2023-20247 · Network & remote access · Cisco · reported by psirt@cisco.comMedium 5
A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to bypass a configured multiple certificate authentication policy and connect using only a valid username and password. This vulnerability is due to improper error handling during remote access VPN authentication. An attacker could exploit this vulnerability by sending crafted requests during remote access VPN session establishment. A successful exploit could allow the attacker to bypass the configured multiple certificate authentication policy while retaining the privileges and permissions associated with the original connection profile.
- Product
- Cisco Adaptive Security Appliance (ASA) Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec.cloudapps.cisco.comsec.cloudapps.cisco.com
Nov 1, 2023A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allCVE-2023-20095 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 8.6
A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of HTTPS requests. An attacker could exploit this vulnerability by sending crafted HTTPS requests to an affected system. A successful exploit could allow the attacker to cause resource exhaustion, resulting in a DoS condition.
- Product
- Cisco Adaptive Security Appliance (ASA) Software
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsec.cloudapps.cisco.comsec.cloudapps.cisco.com
Oct 12, 2023BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass.CVE-2023-23632 · Other software · beyondtrust · reported by MITREHigh 7.8
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.
- Product
- privileged_remote_access
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcompass-security.comseclists.org
Sep 11, 2023An issue was discovered in TSplus Remote Access through 16.0.2.14.CVE-2023-31069 · Other software · Tsplus · reported by MITRECritical 9.8
An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.
- Product
- Tsplus Remote Work
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 11, 2023An issue was discovered in TSplus Remote Access through 16.0.2.14.CVE-2023-31068 · Other software · Tsplus · reported by MITRECritical 9.8
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.
- Product
- Tsplus Remote Work
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 11, 2023An issue was discovered in TSplus Remote Access through 16.0.2.14.CVE-2023-31067 · Other software · Tsplus · reported by MITRECritical 9.8
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.
- Product
- Tsplus Remote Access
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 5, 2023BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited tCVE-2023-4310 · Other software · BeyondTrust · reported by 9119a7d8-5eab-497f-8521-727c672e3725Critical 9.8
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.
- Product
- Privileged Remote Access (PRA)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbeyondtrustcorp.service-now.combeyondtrust.com
Aug 23, 2023 ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default.CVE-2023-3453 · Other software · ETIC Telecom · reported by ics-cert@hq.dhs.govHigh 7.1
ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with adjacent network access to alter the configuration of the device or cause a denial-of-service condition.
- Product
- Remote Access Server (RAS)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 11, 2023Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2023-35367 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 11, 2023Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2023-35366 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 11, 2023Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2023-35365 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- Product
- Windows 10 Version 1809
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
May 24, 2023This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.CVE-2023-1174 · Other software · Kubernetes · reported by jordan@liggitt.netCritical 9.8
This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.
- Product
- minikube
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgroups.google.comgroups.google.com
Jan 26, 2023A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker.CVE-2022-47767 · Other software · Solar-log · reported by MITRECritical 9.8
A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to the attacker. This affects Solar-Log devices that use firmware version v4.2.7 up to v5.1.1 (included). This does not exist in SL 200, 500, 1000 / fixed in 4.2.8 for SL 250, 300, 1200, 2000, SL 50 Gateway / fixed in 5.1.2 / 6.0.0 for SL Base.
- Product
- Solar-log 250 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsolar-log.comswascan.com
Jan 18, 2023 Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set.CVE-2022-34436 · Other software · Dell · reported by security_alert@emc.comLow 2.7
Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
- Product
- Integrated Dell Remote Access Controller 8
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 18, 2023 Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set.CVE-2022-34435 · Other software · Dell · reported by security_alert@emc.comLow 2.7
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
- Product
- Integrated Dell Remote Access Controller 9
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 26, 2022Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell.CVE-2022-24119 · Other software · GE · reported by MITRECritical 9.8
Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.
- Product
- Inet 900 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.