Security feed

Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions. CISA required action: Apply updates per vendor instructions.

HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerS…

A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML. CISA required action: Apply updates per vendor instructions.

Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request. CISA requir…

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. CISA required action: Apply updates per vendor instructions.

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs. CISA required action: Apply updates per vendor instructions.

The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges. CISA required action: Apply updates per vendor instructions.

OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site. CISA required action: Apply updates per vendor instructions.

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files. CISA required action: Apply updates per vendor instructions.

The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands. CISA required action: Apply updates per vendor instructions.

Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service. CISA required action: Apply updates per vendor instructions.

Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/. CISA required action: Apply updates per vendor instru…

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files. CISA required action: Apply updates per vendor instructions.

The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution. CISA required action: Apply updates per vendor instructions.

setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution. CISA required action: Apply…

Unspecified vulnerability in Adobe Flash Player allows for remote code execution. CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. CISA required action: Apply updates per vendor instructions.