CVE-2024-4040 is a high-severity vulnerability in CrushFTP that allows a remote attacker to escape the virtual file system (VFS) sandbox. This sandbox escape enables the attacker to potentially access or manipulate files outside the intended restricted environment. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2022-38028 is a privilege escalation vulnerability in the Microsoft Windows Print Spooler service. It allows an attacker to modify a JavaScript constraints file and execute it with SYSTEM-level permissions. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache HugeGraph-Server: from 1.0.0 before 1.3.0 in Java8 & Java11
Users are recommended to upgrade to version 1.3.0 with Java11 & enable the Auth system, which fixes the issue.
CVE-2024-3400 is a critical command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect feature. It allows an unauthenticated attacker to execute arbitrary commands with root privileges on the firewall. The vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
The Nice Linear eMerge E3-Series product contains an OS command injection vulnerability (CVE-2019-7256) that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2021-44529 is a code injection vulnerability in Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) that allows unauthenticated users to execute malicious code with limited permissions. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The flaw involves CWE-94, indicating improper control of code injection. No specific affected versions or patch information is provided.
ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or modify restricted files. Exploitation of this issue does not require user interaction. Exploitation of this issue requires the admin panel be exposed to the internet.
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2024-23296 is a high-severity memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports of this vulnerability being exploited in the wild. The issue was addressed by improved validation to fix the memory corruption. Patches for this vulnerability are included in iOS 16.7.8, iPadOS 16.7.8, iOS 17.4, iPadOS 17.
CVE-2024-23225 is a memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, and macOS versions. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports that this vulnerability may have been exploited in the wild. The issue was addressed through improved validation and fixed in iOS 16.7.6, iPadOS 16.7.6, iOS 17.4, iPadOS 17.4, macOS Monterey 12.
Sunhillo SureLine contains an OS command injection vulnerability in the /cgi/networkDiag.cgi endpoint. This flaw allows attackers to inject shell metacharacters via the ipAddr or dnsAddr parameters, potentially causing denial-of-service or enabling persistent unauthorized access on the network. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data.
CVE-2024-27199 is a path traversal vulnerability in JetBrains TeamCity versions before 2023.11.4. This flaw allows an unauthenticated attacker to perform limited administrative actions by exploiting improper input validation of file paths. The vulnerability has a CVSS score of 7.3, indicating high severity, with potential impacts on confidentiality, integrity, and availability. No official patch link is provided in the data, but the fixed version is identified as 2023.11.4. There are no known exploits in the wild at this time.
CVE-2024-27198 is a critical authentication bypass vulnerability in JetBrains TeamCity versions prior to 2023.11.4. This flaw, classified under CWE-288, allows unauthenticated attackers to perform administrative actions without proper authorization. The vulnerability has a CVSS v3.1 score of 9.8, indicating a severe risk with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the potential for abuse is significant given TeamCity’s role in continuous integration and deployment pipelines. Organizations using affected TeamCity versions should prioritize patching to prevent unauthorized access and potential compromise of build environments. Countries with substantial use of JetBrains TeamCity and strong software development sectors are at higher risk.
CVE-2024-21338 is a high-severity vulnerability in the Microsoft Windows Kernel involving an exposed IOCTL dispatcher in appid.sys with insufficient access control. This flaw allows a local attacker to escalate privileges on the affected system. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2024-1709 is a critical authentication bypass vulnerability in ConnectWise ScreenConnect that enables attackers with network access to the management interface to create new administrator-level accounts. This vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.