Adobe Flash Player has a vulnerability in its ExternalInterface ActionScript functionality that allows remote attackers to execute arbitrary code by delivering crafted SWF content. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2024-40766 is a critical improper access control vulnerability in SonicWall SonicOS that allows unauthorized resource access and can cause the firewall to crash under certain conditions. It has a high CVSS score of 9.3 and is known to be exploited in the wild, including use in ransomware campaigns.
ImageMagick contains an improper input validation vulnerability affecting multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT). This flaw allows remote attackers to execute arbitrary code via shell metacharacters in crafted images. The vulnerability is known to be exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the input data.
CVE-2017-1000253 is a high-severity vulnerability in the Linux kernel involving a position-independent executable (PIE) stack buffer corruption in the load_elf_binary() function. This flaw allows a local attacker to escalate privileges on the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Draytek VigorConnect has a path traversal vulnerability in the DownloadFileServlet endpoint that allows unauthenticated attackers to download arbitrary files from the underlying operating system with root privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Draytek VigorConnect has a path traversal vulnerability in its WebServlet file download functionality. This flaw allows an unauthenticated attacker to download arbitrary files from the underlying operating system with root privileges. The vulnerability has been exploited in the wild, indicating active attacks. No specific affected versions or patch information are provided.
CVE-2021-31196 is a high-severity information disclosure vulnerability in Microsoft Exchange Server that has been exploited in the wild. It allows an attacker to remotely execute code on affected systems. No specific affected versions or patch information is provided in the available data.
CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel's legacy_parse_param function within the Filesystem Context functionality. This flaw allows an attacker to open a filesystem that does not support the Filesystem Context API, potentially leading to privilege escalation. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Dahua IP cameras and related products have an authentication bypass vulnerability identified as CVE-2021-33044. This flaw occurs when the NetKeyboard type argument is specified by the client during authentication, allowing bypass of normal authentication controls. The vulnerability is known to be exploited in the wild and is rated with high severity. No specific affected versions or patch information is provided in the available data.
Dahua IP cameras and related products have an authentication bypass vulnerability that occurs when the client specifies the loopback device during authentication. This flaw allows attackers to bypass authentication controls. The vulnerability is known to be exploited in the wild and is classified as high severity. No specific affected versions or patch information is provided.
CVE-2024-38106 is a high-severity privilege escalation vulnerability in the Microsoft Windows Kernel. It involves a race condition that allows a local attacker with limited privileges to escalate to SYSTEM privileges. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
Microsoft Project contains a remote code execution vulnerability identified as CVE-2024-38189. This flaw can be exploited by opening a specially crafted malicious file, potentially allowing an attacker to execute arbitrary code on the affected system. The vulnerability has a high severity rating with a CVSS score of 8.8 and is known to be exploited in the wild. No specific affected versions or patch information is provided at this time.
Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.
CVE-2024-38107 is a high-severity privilege escalation vulnerability in the Microsoft Windows Power Dependency Coordinator component. It allows a local attacker with limited privileges to escalate to SYSTEM-level privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2024-38178 is a high-severity memory corruption vulnerability in the Microsoft Windows Scripting Engine. It allows an unauthenticated attacker to execute remote code by crafting a malicious URL. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2024-38193 is a high-severity privilege escalation vulnerability in the Microsoft Windows Ancillary Function Driver for WinSock. It allows a local attacker with limited privileges to escalate to SYSTEM-level privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-0824 is a vulnerability in Microsoft COM for Windows involving deserialization of untrusted data. This flaw can be exploited via specially crafted files or scripts to achieve privilege escalation and remote code execution. It has been observed exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2012-4792 is a use-after-free vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code by triggering access to an improperly allocated or deleted object, specifically demonstrated with a CDwnBindInfo object. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
VMware vCenter Server has a vulnerability due to incorrect default file permissions that can allow a remote, privileged attacker to access sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2024-36401 is a critical remote code execution vulnerability in OSGeo GeoServer GeoTools caused by improper neutralization of directives in dynamically evaluated code. The flaw arises from unsafe evaluation of property names as XPath expressions, allowing unauthenticated attackers to execute arbitrary code remotely. The vulnerability has a CVSS score of 9.8 and is known to be exploited in the wild. No specific affected versions or patch information is provided in the available data.