NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.
The D-Link DIR-605 router has an information disclosure vulnerability (CVE-2021-40655) that allows attackers to obtain a username and password by sending a forged POST request to the /getcfg.php page. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
The D-Link DIR-600 router is affected by a cross-site request forgery (CSRF) vulnerability that enables attackers to change router configurations by hijacking an active administrator session. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
CVE-2024-30051 is a high-severity privilege escalation vulnerability in the Microsoft DWM Core Library that allows an attacker with limited privileges to gain SYSTEM-level privileges. It has been exploited in the wild and is known to be used in ransomware campaigns. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No specific affected versions or patch information is provided in the available data.
CVE-2024-30040 is a high-severity security feature bypass vulnerability in the Microsoft Windows MSHTML Platform. It allows attackers to bypass security features, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
GitLab Community and Enterprise Editions have an improper access control vulnerability that allows attackers to trigger password reset emails to unverified email addresses. This flaw can be exploited to facilitate account takeover. The vulnerability is critical with a CVSS score of 10 and has been observed exploited in the wild.
CVE-2024-29988 is a high-severity security feature bypass vulnerability in Microsoft SmartScreen Prompt that allows attackers to bypass the Mark of the Web (MotW) protection. This vulnerability can be exploited in combination with other vulnerabilities (CVE-2023-38831 and CVE-2024-21412) to execute malicious files. It has been observed exploited in the wild. No specific affected versions or patch information is provided.
CVE-2022-38028 is a privilege escalation vulnerability in the Microsoft Windows Print Spooler service. It allows an attacker to modify a JavaScript constraints file and execute it with SYSTEM-level permissions. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument system leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259284. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user with the input messagebus leads to hard-coded credentials. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259283. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug-ins and that has been available in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary code with root-level privileges. Administrator-level privileges are required to exploit this vulnerability.
This vulnerability is due to improper validation of a file when it is read from system flash memory. An attacker could exploit this vulnerability by copying a crafted file to the disk0: file system of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device after the next reload of the device, which could alter system behavior. Because the injected code could persist across device reboots, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.
A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to incomplete error checking when parsing an HTTP header. An attacker could exploit this vulnerability by sending a crafted HTTP request to a targeted web server on a device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.
CVE-2024-4040 is a high-severity vulnerability in CrushFTP that allows a remote attacker to escape the virtual file system (VFS) sandbox. This sandbox escape enables the attacker to potentially access or manipulate files outside the intended restricted environment. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-3400 is a critical command injection vulnerability in Palo Alto Networks PAN-OS GlobalProtect feature. It allows an unauthenticated attacker to execute arbitrary commands with root privileges on the firewall. The vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
The Nice Linear eMerge E3-Series product contains an OS command injection vulnerability (CVE-2019-7256) that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.