CVE-2024-4040 is a high-severity vulnerability in CrushFTP that allows a remote attacker to escape the virtual file system (VFS) sandbox. This sandbox escape enables the attacker to potentially access or manipulate files outside the intended restricted environment. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-3400 is a critical command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect feature. It allows an unauthenticated attacker to execute arbitrary commands with root privileges on the firewall. The vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2021-44529 is a code injection vulnerability in Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) that allows unauthenticated users to execute malicious code with limited permissions. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The flaw involves CWE-94, indicating improper control of code injection. No specific affected versions or patch information is provided.
The Nice Linear eMerge E3-Series product contains an OS command injection vulnerability (CVE-2019-7256) that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2024-27198 is a critical authentication bypass vulnerability in JetBrains TeamCity versions prior to 2023.11.4. This flaw, classified under CWE-288, allows unauthenticated attackers to perform administrative actions without proper authorization. The vulnerability has a CVSS v3.1 score of 9.8, indicating a severe risk with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the potential for abuse is significant given TeamCity’s role in continuous integration and deployment pipelines. Organizations using affected TeamCity versions should prioritize patching to prevent unauthorized access and potential compromise of build environments. Countries with substantial use of JetBrains TeamCity and strong software development sectors are at higher risk.
CVE-2024-23296 is a high-severity memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports of this vulnerability being exploited in the wild. The issue was addressed by improved validation to fix the memory corruption. Patches for this vulnerability are included in iOS 16.7.8, iPadOS 16.7.8, iOS 17.4, iPadOS 17.
CVE-2024-23225 is a memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, and macOS versions. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports that this vulnerability may have been exploited in the wild. The issue was addressed through improved validation and fixed in iOS 16.7.6, iPadOS 16.7.6, iOS 17.4, iPadOS 17.4, macOS Monterey 12.
Sunhillo SureLine contains an OS command injection vulnerability in the /cgi/networkDiag.cgi endpoint. This flaw allows attackers to inject shell metacharacters via the ipAddr or dnsAddr parameters, potentially causing denial-of-service or enabling persistent unauthorized access on the network. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data.
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912
CVE-2024-21338 is a high-severity vulnerability in the Microsoft Windows Kernel involving an exposed IOCTL dispatcher in appid.sys with insufficient access control. This flaw allows a local attacker to escalate privileges on the affected system. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2020-3259 is an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) affecting certain AnyConnect and WebVPN configurations. The flaw allows an attacker to retrieve memory contents due to a buffer tracking issue when parsing invalid URLs via the web services interface. This could lead to exposure of confidential information. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2024-21410 is a critical privilege escalation vulnerability in Microsoft Exchange Server. It allows an unauthenticated attacker to escalate privileges, potentially leading to full compromise of the affected system. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Exploits are known to be active in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2024-21351 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass the SmartScreen security feature. This bypass can enable code injection leading to potential code execution, which may result in data exposure and reduced system availability. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided.
CVE-2024-21412 is a high-severity security feature bypass vulnerability in Microsoft Windows Internet Shortcut Files. It allows attackers to bypass security features, potentially leading to high confidentiality and integrity impacts. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.