CVE Vulnerability Catalog

Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

Zimbra Collaboration (ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands become unescaped, causing an overwrite of arbitrary cached entries.

Vulnerability in Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF Faces) in versions 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise ADF, potentially leading to takeover. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as ../../../../repository/deployment/server/webapps. Affects WSO2 API Manager 2.2.0-4.0.0, WSO2 Identity Server 5.2.0-5.11.0, WSO2 Identity Server Analytics 5.4.0-5.6.0, WSO2 Identity Server as Key Manager 5.3.0-5.11.0, WSO2 Enterprise Integrator 6.2.0-6.6.0, WSO2 Open Banking AM 1.4.0-2.0.0, and WSO2 Open Banking KM 1.4.0-2.0.0.

Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS commands as SYSTEM via the policy custom script feature. Due to the use of a default administrator password, attackers may be able to abuse this functionality with minimal effort. Additionally, a remote and partially authenticated attacker may be able to inject arbitrary commands into the custom script due to an unsanitized password field.

A privilege elevation vulnerability in the Windows User Profile Service. It requires authentication as a local user.

A privilege elevation vulnerability in the Windows Common Log File System Driver. It is exploited locally by an authenticated user.

JAI-EXT is an open-source project extending the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script via network request can lead to Remote Code Execution as the script is compiled into Java code via Janino and executed. This affects the downstream GeoServer project. Version 1.2.22 contains a patch that disables the ability to inject malicious code into the resulting script.

A vulnerability in VMware Workspace ONE Access, Identity Manager and vRealize Automation due to improper permissions in support scripts. A local attacker can escalate privileges to root.

VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

A use-after-free vulnerability in the Animation component in Google Chrome prior to 98.0.4758.102. A remote attacker can trigger heap corruption via a crafted HTML page.

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment; applications deployed as Spring Boot executable jars are not vulnerable to this specific exploit, but the vulnerability is more general in nature.

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information.

A remote command execution (RCE) vulnerability was discovered in D-Link DIR-820L version 1.05B03 via an HTTP POST request to the get set ccp function.

An out-of-bounds memory write flaw was found in the Linux kernel's watch_queue event notification subsystem, which can overwrite parts of kernel state.

An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.

A use-after-free issue in WebKit addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of active exploitation.

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges; Apple is aware of a report that this issue may have been actively exploited.