Threat database

CVE-2024-30088 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the Microsoft Windows Kernel that can lead to privilege escalation. It has a high severity score and is known to be exploited in the wild, including use in ransomware campaigns. The vulnerability requires local access with high attack complexity and low privileges but no user interaction. No specific affected Windows versions or patch information are provided in the available data.

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Microsoft Management Console Remote Code Execution Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

CVE-2019-0344 is a high-severity vulnerability in SAP Commerce Cloud (formerly Hybris) involving deserialization of untrusted data in the mediaconversion and virtualjdbc extensions. This flaw allows attackers to perform code injection. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.

Multiple DrayTek Vigor routers (Vigor3900, Vigor2960, and Vigor300B) have an OS command injection vulnerability in the cgi-bin/mainfunction.cgi/cvmcfgupload endpoint. This flaw allows remote attackers to execute arbitrary commands by injecting shell metacharacters in a filename when the content type text/x-python-script is used. The vulnerability is known to be exploited in the wild.

OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

CVE-2020-0618 is a deserialization vulnerability in Microsoft SQL Server Reporting Services that allows an authenticated attacker to execute code with the privileges of the Report Server service account. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It affects SQL Server Reporting Services and requires authentication to exploit.

CVE-2020-14644 is a deserialization vulnerability in Oracle WebLogic Server that allows unauthenticated remote attackers with network access via T3 or IIOP protocols to execute arbitrary code. This vulnerability has been exploited in the wild. Oracle has released patches as part of its July 2020 Critical Patch Update and strongly recommends applying these patches promptly to mitigate the risk.

CVE-2022-21445 is a high-severity vulnerability in the Oracle ADF Faces library included with Oracle JDeveloper Distribution. It involves deserialization of untrusted data, which can lead to unauthenticated remote code execution. The vulnerability has been exploited in the wild. Oracle has released patches for this and other vulnerabilities in its April 2022 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.

RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11 Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.