CVE-2025-2749 is a high-severity vulnerability in Kentico Xperience up to version 13.0.178 that allows authenticated users of the Staging Sync Server to perform path traversal and arbitrary file uploads. This can lead to remote code execution on the affected server. The vulnerability arises from improper limitation of pathname to restricted directories, enabling attackers to upload and execute malicious content server-side.
CVE-2024-27199 is a path traversal vulnerability in JetBrains TeamCity versions before 2023.11.4. This flaw allows an unauthenticated attacker to perform limited administrative actions by exploiting improper input validation of file paths. The vulnerability has a CVSS score of 7.3, indicating high severity, with potential impacts on confidentiality, integrity, and availability. No official patch link is provided in the data, but the fixed version is identified as 2023.11.4. There are no known exploits in the wild at this time.
cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to the control panel. This critical vulnerability has a CVSS 4.0 score of 9.3 and is known to be actively exploited in the wild, including use in ransomware campaigns.
Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.
Apache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including
BrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).
An authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.
Because Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().
This issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.
Users are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue
CVE-2026-32201 is a medium severity vulnerability in Microsoft SharePoint Enterprise Server 2016 caused by improper input validation. This flaw allows an unauthorized attacker to perform spoofing attacks over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for the affected versions. Exploitation in the wild is confirmed, and the vulnerability is listed in the CISA KEV catalog.
Microsoft Office Excel contains a remote code execution vulnerability (CVE-2009-0238) that allows an attacker to take complete control of an affected system if a user opens a specially crafted Excel file containing a malformed object. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-21529 is a deserialization vulnerability in Microsoft Exchange Server that allows an authenticated attacker to execute remote code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability (CVE-2012-1854) that could allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-36424 is a high-severity out-of-bounds read vulnerability in the Microsoft Windows Common Log File System Driver. This flaw can be exploited by a threat actor with limited privileges to escalate their privileges on the affected system. The vulnerability has been observed exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2020-9715 is a use-after-free vulnerability in Adobe Acrobat that can lead to remote code execution. The vulnerability has been exploited in the wild. It requires user interaction and local access to the vulnerable system. The vulnerability has a high severity rating with a CVSS score of 7.8.
Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVE-2026-20122 is a medium severity vulnerability in Cisco Catalyst SD-WAN Manager's API that allows an authenticated remote attacker with valid read-only API credentials to overwrite arbitrary files on the local file system. This occurs due to improper file handling in the API interface. Successful exploitation can lead to the attacker gaining elevated vmanage user privileges.
CVE-2026-20128 is a high-severity vulnerability in the Data Collection Agent (DCA) feature of Cisco Catalyst SD-WAN Manager. It allows an unauthenticated, remote attacker to gain DCA user privileges by exploiting a credential file containing the DCA password accessible via a crafted HTTP request. This vulnerability affects multiple versions prior to 20.18, which is not vulnerable. Successful exploitation could enable an attacker to access other affected systems with elevated privileges.
A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system.
This vulnerability is due to insufficient file system restrictions. An authenticated attacker with netadmin privileges could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read sensitive information on the underlying operating system.
CVE-2025-48700 is a Cross-Site Scripting (XSS) vulnerability affecting Zimbra Collaboration Suite (ZCS) versions 8.8.15, 9.0, 10.0, and 10.1 in the Classic UI. The flaw allows attackers to execute arbitrary JavaScript within a user's session by sending a crafted email containing malicious HTML with an @import directive and other script injection vectors. Exploitation occurs when a user views the malicious email, requiring no further interaction. This can lead to unauthorized access to sensitive information within the affected session. The vulnerability has a CVSS score of 6.
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
CVE-2026-5281 is a use-after-free vulnerability in the Dawn component of Google Chrome versions prior to 146.0.7680.178. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code by delivering a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported. The vulnerability affects Chrome desktop versions before 146.0.
CVE-2026-1340 is a critical vulnerability in Ivanti Endpoint Manager Mobile involving improper control of code generation, classified as CWE-94 (Code Injection). This flaw allows unauthenticated attackers to execute arbitrary code remotely. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available. There are no known exploits in the wild at this time. The affected versions are unspecified, and the product is not a cloud service.