A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Privilege Escalation
Sonicwall
Email Security Appliance 5000 Firmware
Email Security Appliance 5050 Firmware
Email Security Appliance 7000 Firmware
+8
NVD
VulDB
CVSS 3.1
9.8
EPSS
83.4%
Threat
7.5
An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Buffer Overflow
Google
Heap Overflow
Android
NVD
CVSS 3.1
9.8
EPSS
0.7%