ImageMagick contains an improper input validation vulnerability affecting multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT). This flaw allows remote attackers to execute arbitrary code via shell metacharacters in crafted images. The vulnerability is known to be exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the input data.
CVE-2017-1000253 is a high-severity vulnerability in the Linux kernel involving a position-independent executable (PIE) stack buffer corruption in the load_elf_binary() function. This flaw allows a local attacker to escalate privileges on the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.
Draytek VigorConnect has a path traversal vulnerability in its WebServlet file download functionality. This flaw allows an unauthenticated attacker to download arbitrary files from the underlying operating system with root privileges. The vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information are provided.
Draytek VigorConnect has a path traversal vulnerability in the DownloadFileServlet endpoint that allows unauthenticated attackers to download arbitrary files from the underlying operating system with root privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Improper path validation in promecefpluginhost.exe in Kingsoft WPS Office version ranging from 12.2.0.13110 to 12.2.0.16412 (exclusive) on Windows allows an attacker to load an arbitrary Windows library.
The vulnerability was found weaponized as a single-click exploit in the form of a deceptive spreadsheet document
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Incorrect Authorization vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: through 18.12.14.
Users are recommended to upgrade to version 18.12.15, which fixes the issue.
Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints).
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.
CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel's legacy_parse_param function within the Filesystem Context functionality. This flaw allows an attacker to open a filesystem that does not support the Filesystem Context API, potentially leading to privilege escalation. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Dahua IP cameras and related products have an authentication bypass vulnerability that occurs when the client specifies the loopback device during authentication. This flaw allows attackers to bypass authentication controls. The vulnerability is known to be exploited in the wild and is classified as high severity. No specific affected versions or patch information is provided.
Dahua IP cameras and related products have an authentication bypass vulnerability identified as CVE-2021-33044. This flaw occurs when the NetKeyboard type argument is specified by the client during authentication, allowing bypass of normal authentication controls. The vulnerability is known to be exploited in the wild and is rated with high severity. No specific affected versions or patch information is provided in the available data.
CVE-2021-31196 is a high-severity information disclosure vulnerability in Microsoft Exchange Server that has been exploited in the wild. It allows an attacker to remotely execute code on affected systems. No specific affected versions or patch information is provided in the available data.
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine.
While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.
However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.
CVE-2024-38106 is a high-severity privilege escalation vulnerability in the Microsoft Windows Kernel. It involves a race condition that allows a local attacker with limited privileges to escalate to SYSTEM privileges. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.