CVE-2024-1709 is a critical authentication bypass vulnerability in ConnectWise ScreenConnect that enables attackers with network access to the management interface to create new administrator-level accounts. This vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2022-48618 is a high-severity memory corruption vulnerability affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, and watchOS. It involves a time-of-check/time-of-use (TOCTOU) flaw that can allow an attacker with read and write capabilities to bypass Pointer Authentication. The vulnerability has been exploited in the wild. No official vendor advisory or patch information is currently available.
CVE-2024-21762 is a critical out-of-bound write vulnerability in Fortinet FortiOS that allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests. It has a high CVSS score of 9.6 and is known to be exploited in the wild, including use in ransomware campaigns.
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.
Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
CVE-2024-23222 is a high-severity type confusion vulnerability in Apple Safari and WebKit that may allow processing of maliciously crafted web content to lead to arbitrary code execution. The issue was addressed with improved checks and memory handling. This vulnerability is associated with the Coruna exploit and affects multiple Apple platforms including iOS, iPadOS, macOS, tvOS, and visionOS. Apple released official patches in Safari 17.3 and various OS updates starting January 22, 2024, including backports for devices unable to upgrade to the latest OS versions. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor advisory confirms the availability of official fixes across affected platforms.
CVE-2023-34048 is a critical out-of-bounds write vulnerability in VMware vCenter Server versions 7.0 and 8.0, specifically in the DCERPC protocol implementation. This flaw allows a remote attacker with network access to the vCenter Server to trigger memory corruption that can lead to remote code execution without requiring authentication or user interaction. The vulnerability has a CVSS score of 9.8, indicating a severe risk to confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the ease of exploitation and the critical nature of vCenter Server in enterprise environments make this a significant threat. European organizations relying on VMware vCenter for virtualization management are at high risk, especially in countries with large enterprise IT infrastructures. Immediate patching or mitigation is essential to prevent potential compromise. Defenders should prioritize network segmentation, restrict access to vCenter Server, and monitor for suspicious activity related to DCERPC traffic.
CVE-2023-35082 is a critical authentication bypass vulnerability affecting Ivanti EPMM version 11.10 and earlier. It allows unauthenticated attackers to gain unauthorized access to restricted application functionality and resources without proper authentication. The vulnerability has a CVSS score of 10.0, indicating maximum severity with full impact on confidentiality, integrity, and availability. No user interaction or privileges are required to exploit this flaw, and it affects all network-accessible instances of the vulnerable software. Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk to organizations using Ivanti EPMM for endpoint and mobile device management. European organizations relying on Ivanti EPMM should prioritize patching or mitigating this issue to prevent potential compromise. Countries with higher adoption of Ivanti products and critical infrastructure managed via EPMM are at greater risk. Immediate mitigation steps include restricting network access to the management interface, applying vendor patches when available, and monitoring for suspicious activity related to unauthorized access attempts.
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2018-15133 is a high-severity vulnerability in the Laravel Framework involving deserialization of untrusted data. It allows remote command execution but requires that an attacker has access to the application's encryption key (APP_KEY). This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
D-Link DSL-2750B devices have a command injection vulnerability that permits remote, unauthenticated attackers to execute arbitrary commands via the login.cgi cli parameter. This vulnerability is known to be exploited in the wild, posing a significant risk to affected devices.
The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.
Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config.
All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database.
Add a strong SECRET_KEY to your `superset_config.py` file like:
SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY>
Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.