Threat database

CVE-2016-3427 is an unspecified vulnerability in Oracle Java SE and JRockit related to Java Management Extensions (JMX). It allows remote attackers to impact confidentiality, integrity, and availability. The vulnerability can be exploited via sandboxed Java Web Start applications, sandboxed Java applets, or by supplying data to APIs in the affected component without using sandboxed Java applications. Oracle has released patches addressing this and other vulnerabilities in their April 2016 Critical Patch Update. Exploits have been observed in the wild, emphasizing the importance of applying available fixes.

Apache Tomcat contains a remote code execution vulnerability related to the JmxRemoteLifecycleListener component. This vulnerability arises when the listener is used and an attacker can access Java Management Extension (JMX) ports. The issue stems from the listener not being updated to align with Oracle's fixes for a related vulnerability (CVE-2016-3427) affecting credential types. Exploitation of this vulnerability has been observed in the wild.

Win32k Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.

CVE-2021-45046 is a high severity vulnerability in Apache Log4j2 involving deserialization of untrusted data. It arises from an incomplete fix of the earlier CVE-2021-44228 vulnerability. The flaw allows remote code execution through the Thread Context Lookup Pattern in certain non-default configurations. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.

The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config. All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like: SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY> Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.

CVE-2023-28432 is an information disclosure vulnerability in MinIO cluster deployments where the system returns all environment variables. This can expose sensitive configuration and secret data. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information are provided.

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

CVE-2023-2136 is a critical integer overflow vulnerability in the Skia graphics library used by Google Chrome versions prior to 112.0.5615.137. This flaw allows a remote attacker who has already compromised the renderer process to potentially escape the browser's sandbox by crafting a malicious HTML page. The vulnerability impacts confidentiality, integrity, and availability with a high CVSS score of 9.6, indicating critical severity. Exploitation requires user interaction but no prior privileges or authentication. Although no known exploits are currently reported in the wild, the risk of sandbox escape makes this a significant threat. European organizations using vulnerable Chrome versions are at risk, especially those with high exposure to web-based threats.

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.

CVE-2017-6742 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code or cause the affected system to reload. This vulnerability has been exploited in the wild. No explicit affected versions or patch information is provided in the input data.

CVE-2019-8526 is a use-after-free vulnerability in Apple macOS that can lead to privilege escalation. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the available data.

Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.