The Nice Linear eMerge E3-Series product contains an OS command injection vulnerability (CVE-2019-7256) that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2024-27198 is a critical authentication bypass vulnerability in JetBrains TeamCity versions prior to 2023.11.4. This flaw, classified under CWE-288, allows unauthenticated attackers to perform administrative actions without proper authorization. The vulnerability has a CVSS v3.1 score of 9.8, indicating a severe risk with network attack vector, no required privileges or user interaction, and full impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the potential for abuse is significant given TeamCity’s role in continuous integration and deployment pipelines. Organizations using affected TeamCity versions should prioritize patching to prevent unauthorized access and potential compromise of build environments. Countries with substantial use of JetBrains TeamCity and strong software development sectors are at higher risk.
CVE-2024-23296 is a high-severity memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, macOS, tvOS, visionOS, and watchOS. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports of this vulnerability being exploited in the wild. The issue was addressed by improved validation to fix the memory corruption. Patches for this vulnerability are included in iOS 16.7.8, iPadOS 16.7.8, iOS 17.4, iPadOS 17.
CVE-2024-23225 is a memory corruption vulnerability in the Apple kernel affecting iOS, iPadOS, and macOS versions. It allows an attacker with arbitrary kernel read and write capabilities to potentially bypass kernel memory protections. Apple has acknowledged reports that this vulnerability may have been exploited in the wild. The issue was addressed through improved validation and fixed in iOS 16.7.6, iPadOS 16.7.6, iOS 17.4, iPadOS 17.4, macOS Monterey 12.
Sunhillo SureLine contains an OS command injection vulnerability in the /cgi/networkDiag.cgi endpoint. This flaw allows attackers to inject shell metacharacters via the ipAddr or dnsAddr parameters, potentially causing denial-of-service or enabling persistent unauthorized access on the network. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data.
In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912
CVE-2024-21338 is a high-severity vulnerability in the Microsoft Windows Kernel involving an exposed IOCTL dispatcher in appid.sys with insufficient access control. This flaw allows a local attacker to escalate privileges on the affected system. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2024-21410 is a critical privilege escalation vulnerability in Microsoft Exchange Server. It allows an unauthenticated attacker to escalate privileges, potentially leading to full compromise of the affected system. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Exploits are known to be active in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2020-3259 is an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) affecting certain AnyConnect and WebVPN configurations. The flaw allows an attacker to retrieve memory contents due to a buffer tracking issue when parsing invalid URLs via the web services interface. This could lead to exposure of confidential information. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2024-21351 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass the SmartScreen security feature. This bypass can enable code injection leading to potential code execution, which may result in data exposure and reduced system availability. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided.
CVE-2024-21412 is a high-severity security feature bypass vulnerability in Microsoft Windows Internet Shortcut Files. It allows attackers to bypass security features, potentially leading to high confidentiality and integrity impacts. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcube_string_replacer.php behavior.
CVE-2024-1709 is a critical authentication bypass vulnerability in ConnectWise ScreenConnect that enables attackers with network access to the management interface to create new administrator-level accounts. This vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2022-48618 is a high-severity memory corruption vulnerability affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, and watchOS. It involves a time-of-check/time-of-use (TOCTOU) flaw that can allow an attacker with read and write capabilities to bypass Pointer Authentication. The vulnerability has been exploited in the wild. No official vendor advisory or patch information is currently available.
CVE-2024-21762 is a critical out-of-bound write vulnerability in Fortinet FortiOS that allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests. It has a high CVSS score of 9.6 and is known to be exploited in the wild, including use in ransomware campaigns.
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.
Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
CVE-2024-23222 is a high-severity type confusion vulnerability in Apple Safari and WebKit that may allow processing of maliciously crafted web content to lead to arbitrary code execution. The issue was addressed with improved checks and memory handling. This vulnerability is associated with the Coruna exploit and affects multiple Apple platforms including iOS, iPadOS, macOS, tvOS, and visionOS. Apple released official patches in Safari 17.3 and various OS updates starting January 22, 2024, including backports for devices unable to upgrade to the latest OS versions. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor advisory confirms the availability of official fixes across affected platforms.