CVE-2024-35250 is a high-severity vulnerability in the Microsoft Windows Kernel-Mode Driver involving an untrusted pointer dereference. This flaw allows a local attacker to escalate privileges on the affected system. It has been confirmed exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2024-55956 affects Cleo Harmony, VLTrader, and LexiCom products prior to version 5.8.0.24. The vulnerability allows an unauthenticated attacker to import and execute arbitrary Bash or PowerShell commands on the host system by exploiting the default settings of the Autorun directory. This can lead to full system compromise. The vulnerability has a critical CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2024-50623 is a critical vulnerability affecting multiple Cleo managed file transfer products including Cleo Harmony, VLTrader, and LexiCom. It involves unrestricted file upload and download capabilities that can be exploited to achieve remote code execution with elevated privileges. The vulnerability has a CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
CVE-2024-49138 is a heap-based buffer overflow vulnerability in the Microsoft Windows Common Log File System (CLFS) driver. It allows a local attacker to escalate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8 and has been exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.
The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
ProjectSend has an improper authentication vulnerability that allows remote, unauthenticated attackers to modify application configuration via crafted HTTP requests to options.php. Exploitation enables attackers to create accounts, upload webshells, and embed malicious JavaScript, leading to potential full compromise. This vulnerability is actively exploited in the wild. No specific affected versions or patch information is provided yet.
A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware versions V5.00 through V5.38, USG FLEX series firmware versions V5.00 through V5.38, USG FLEX 50(W) series firmware versions V5.10 through V5.38, and USG20(W)-VPN series firmware versions V5.10 through V5.38 could allow an attacker to download or upload files via a crafted URL.
A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.
Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Software Development Kit, Process Extension). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile PLM Framework accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface to perform actions on the firewall with root privileges.
Cloud NGFW and Prisma Access are not impacted by this vulnerability.
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .
The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software.
Cloud NGFW and Prisma Access are not impacted by this vulnerability.
In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain
CVE-2021-26086 is a path traversal vulnerability in Atlassian Jira Server and Data Center that permits remote attackers to read specific files via the /WEB-INF/web.xml endpoint. This vulnerability has been exploited in the wild. No explicit affected versions or patch information are provided in the input data.
CVE-2014-2120 is a cross-site scripting (XSS) vulnerability in the Cisco Adaptive Security Appliance (ASA) WebVPN login page. It allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. This vulnerability has been exploited in the wild.
