CVE Vulnerability Catalog

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive information. The vulnerability is due to improper access controls for URLs. An attacker could exploit this vulnerability by connecting to an affected device via HTTP or HTTPS and requesting specific URLs. A successful exploit could allow the attacker to download the router configuration or detailed diagnostic information. Cisco has released firmware updates that address this vulnerability.

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. The flaw is due to improper validation of user-supplied input, and exploitation occurs via malicious HTTP POST requests. Successful exploitation allows execution of arbitrary commands on the underlying Linux shell as root.

An improper access control vulnerability in Fortinet FortiOS and FortiADC allows an attacker to obtain LDAP server login credentials configured in FortiGate by pointing a connectivity test to a rogue LDAP server.

Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers.

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, 10, 11, Microsoft Excel Viewer, and Office 365 ProPlus.

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes functionality to read and write Machine Specific Registers (MSRs).

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read/write data from/to IO ports. This could be leveraged to run code with elevated privileges.

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center and other tools expose functionality to read and write arbitrary physical memory. A local attacker could leverage this to elevate privileges.

The GDrv low-level driver in GIGABYTE APP Center and other tools exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system.

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. This affects Internet Explorer 9, 10, and 11. This CVE ID is unique from CVE-2018-8643.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers.

NoneCms V1.3 has a vulnerability in thinkphp/library/think/App.php that allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the query string s=index/\think\Request/input&filter=phpinfo&data=1.

Execution of user-supplied JavaScript during array deserialization leading to an out-of-bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

The Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier, has a code execution vulnerability that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).

Integer overflow in computing the required allocation size when instantiating a new JavaScript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.