Sunhillo SureLine contains an OS command injection vulnerability in the /cgi/networkDiag.cgi endpoint. This flaw allows attackers to inject shell metacharacters via the ipAddr or dnsAddr parameters, potentially causing denial-of-service or enabling persistent unauthorized access on the network. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data.
CVE-2024-21338 is a high-severity vulnerability in the Microsoft Windows Kernel involving an exposed IOCTL dispatcher in appid.sys with insufficient access control. This flaw allows a local attacker to escalate privileges on the affected system. It has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2024-1709 is a critical authentication bypass vulnerability in ConnectWise ScreenConnect that enables attackers with network access to the management interface to create new administrator-level accounts. This vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2020-3259 is an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) affecting certain AnyConnect and WebVPN configurations. The flaw allows an attacker to retrieve memory contents due to a buffer tracking issue when parsing invalid URLs via the web services interface. This could lead to exposure of confidential information. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2024-21410 is a critical privilege escalation vulnerability in Microsoft Exchange Server. It allows an unauthenticated attacker to escalate privileges, potentially leading to full compromise of the affected system. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Exploits are known to be active in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2024-21412 is a high-severity security feature bypass vulnerability in Microsoft Windows Internet Shortcut Files. It allows attackers to bypass security features, potentially leading to high confidentiality and integrity impacts. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2024-21351 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass the SmartScreen security feature. This bypass can enable code injection leading to potential code execution, which may result in data exposure and reduced system availability. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided.
CVE-2024-21762 is a critical out-of-bound write vulnerability in Fortinet FortiOS that allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests. It has a high CVSS score of 9.6 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2022-48618 is a high-severity memory corruption vulnerability affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, and watchOS. It involves a time-of-check/time-of-use (TOCTOU) flaw that can allow an attacker with read and write capabilities to bypass Pointer Authentication. The vulnerability has been exploited in the wild. No official vendor advisory or patch information is currently available.
CVE-2018-15133 is a high-severity vulnerability in the Laravel Framework involving deserialization of untrusted data. It allows remote command execution but requires that an attacker has access to the application's encryption key (APP_KEY). This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-46805 is an authentication bypass vulnerability affecting Ivanti Connect Secure and Policy Secure gateways. It allows attackers to bypass authentication controls in the web component, granting unauthorized access to restricted resources. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. It can also be combined with CVE-2024-21887, a command injection vulnerability, to increase impact. The vulnerability has a high severity rating with a CVSS score of 8.2.
D-Link DSL-2750B devices have a command injection vulnerability that permits remote, unauthenticated attackers to execute arbitrary commands via the login.cgi cli parameter. This vulnerability is known to be exploited in the wild, posing a significant risk to affected devices.
Multiple Qualcomm chipsets have a use-after-free vulnerability triggered during process initialization when shell memory is freed via an IOCTL munmap call. This vulnerability has been exploited in the wild and is rated as high severity.
CVE-2023-4911 is a buffer overflow vulnerability in the GNU C Library's dynamic loader ld.so, triggered by processing the GLIBC_TUNABLES environment variable. This flaw allows a local attacker to execute code with elevated privileges. The vulnerability has a high severity with a CVSS score of 7.8 and is known to be exploited in the wild. No explicit affected versions or patch information are provided in the input data.
CVE-2020-2551 is an unspecified vulnerability in Oracle Fusion Middleware's WebLogic Server core components. It allows an unauthenticated attacker with network access via the IIOP protocol to compromise the WebLogic Server. The vulnerability has been exploited in the wild. Oracle released patches for this and other vulnerabilities in their January 2020 Critical Patch Update and strongly recommends applying these patches promptly.
CVE-2023-36033 is a high-severity privilege escalation vulnerability in the Microsoft Windows Desktop Window Manager (DWM) Core Library. It allows an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-36036 is a privilege escalation vulnerability in the Microsoft Windows Cloud Files Mini Filter Driver. This flaw allows an attacker with limited privileges to escalate to SYSTEM privileges. The vulnerability has a high severity score of 7.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-36025 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass Windows Defender SmartScreen security checks and prompts. This bypass could enable execution of malicious content without the usual warnings. The vulnerability has been exploited in the wild, increasing its risk. No specific affected Windows versions or patch information is provided in the available data.
Apache ActiveMQ has a critical deserialization of untrusted data vulnerability (CVE-2023-46604) that allows remote attackers with network access to execute shell commands on the broker. This is achieved by manipulating serialized class types in the OpenWire protocol, causing the broker to instantiate arbitrary classes on its classpath. The vulnerability has a CVSS score of 10.0 and is known to be exploited in the wild, including use in ransomware campaigns.
CVE-2023-46747 is a critical authentication bypass vulnerability in the F5 BIG-IP Configuration Utility. It allows an unauthenticated attacker with network access to the management port or self IP addresses to execute system commands. This vulnerability can be exploited without user interaction and has been observed in the wild. It is associated with high impact on confidentiality, integrity, and availability. The vulnerability may be combined with CVE-2023-46748 for further exploitation.