Threat database

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

CVE-2024-24919 is an information disclosure vulnerability in Check Point Quantum Security Gateways and related product lines. It allows attackers to access sensitive information on gateways connected to the internet with IPSec VPN, Remote Access VPN, or Mobile Access enabled. The vulnerability has a high severity score of 8.6 and has been exploited in the wild, including use in ransomware campaigns.

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.

Apache Flink contains an improper access control vulnerability (CVE-2020-17519) that allows an attacker to read any file on the local filesystem of the JobManager via its REST interface. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

The D-Link DIR-605 router has an information disclosure vulnerability (CVE-2021-40655) that allows attackers to obtain a username and password by sending a forged POST request to the /getcfg.php page. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

The D-Link DIR-600 router is affected by a cross-site request forgery (CSRF) vulnerability that enables attackers to change router configurations by hijacking an active administrator session. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVE-2024-30040 is a high-severity security feature bypass vulnerability in the Microsoft Windows MSHTML Platform. It allows attackers to bypass security features, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2024-30051 is a high-severity privilege escalation vulnerability in the Microsoft DWM Core Library that allows an attacker with limited privileges to gain SYSTEM-level privileges. It has been exploited in the wild and is known to be used in ransomware campaigns. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided in the available data.

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

GitLab Community and Enterprise Editions have an improper access control vulnerability that allows attackers to trigger password reset emails to unverified email addresses. This flaw can be exploited to facilitate account takeover. The vulnerability is critical with a CVSS score of 10 and has been observed exploited in the wild.

CVE-2024-29988 is a high-severity security feature bypass vulnerability in Microsoft SmartScreen Prompt that allows attackers to bypass the Mark of the Web (MotW) protection. This vulnerability can be exploited in combination with other vulnerabilities (CVE-2023-38831 and CVE-2024-21412) to execute malicious files. It has been observed exploited in the wild. No specific affected versions or patch information is provided.

A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability. This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.