Threats Tagged 'exploited-in-the-wild'

CVE-2020-35730 is a cross-site scripting (XSS) vulnerability in Roundcube Webmail. It allows attackers to send plain text emails containing JavaScript in a link reference element, which is improperly handled by the linkref_addinindex function in rcube_string_replacer.php. This vulnerability has been exploited in the wild and is considered high severity.

CVE-2020-12641 is a remote code execution vulnerability in Roundcube Webmail. It allows attackers to execute arbitrary code by injecting shell metacharacters into configuration settings related to im_convert_path or im_identify_path. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2021-44026 is a high severity SQL injection vulnerability in Roundcube Webmail that affects the search functionality. This vulnerability allows attackers to inject malicious SQL queries via the search or search_params parameters. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2016-9079 is a critical use-after-free vulnerability in the SVG Animation component affecting Mozilla Firefox, Firefox ESR, and Thunderbird. It specifically impacts Firefox and Tor Browser users on Windows. The vulnerability was actively exploited in the wild. Mozilla addressed this issue with fixes released in Firefox 50.0.2, Firefox ESR 45.5.1, and Thunderbird 45.5.1.

CVE-2016-0165 is a high-severity privilege escalation vulnerability in Microsoft Win32k. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Barracuda Email Security Gateway (ESG) appliance contains an improper input validation vulnerability of a user-supplied .tar file, leading to remote command injection.

CVE-2004-1464 is a denial-of-service vulnerability in Cisco IOS that can block telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and sometimes HTTP access to affected devices. This vulnerability has been exploited in the wild and poses a high risk of service disruption.

CVE-2016-6415 is an information disclosure vulnerability in Cisco IOS, IOS XR, and IOS XE affecting the Internet Key Exchange version 1 (IKEv1) security negotiation process. The vulnerability arises from insufficient condition checks in the code handling IKEv1 requests, allowing an attacker to retrieve memory contents. This could lead to unauthorized disclosure of sensitive information. The vulnerability has been exploited in the wild. No explicit patch information is provided in the input data.

CVE-2021-3560 is a high-severity vulnerability in Red Hat Polkit that allows an attacker to bypass credential checks for D-Bus requests, leading to privilege escalation. This incorrect authorization flaw has been exploited in the wild.

CVE-2014-0196 is a race condition vulnerability in the Linux Kernel's n_tty_write function. It allows local users to cause denial-of-service (DoS) or escalate privileges by performing read and write operations with long strings. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2010-3904 is a high-severity vulnerability in the Linux Kernel's Reliable Datagram Sockets (RDS) protocol implementation. It involves improper input validation that can be exploited by local users to gain elevated privileges via crafted use of the sendmsg and recvmsg system calls. This vulnerability has been exploited in the wild.

CVE-2015-5317 is an information disclosure vulnerability in the Jenkins User Interface (UI) that allows users to view the names of jobs and builds on the "Fingerprints" pages that they would normally not have access to. This vulnerability has been exploited in the wild and is considered high severity.

CVE-2016-3427 is an unspecified vulnerability in Oracle Java SE and JRockit related to Java Management Extensions (JMX). It allows remote attackers to impact confidentiality, integrity, and availability. The vulnerability can be exploited via sandboxed Java Web Start applications, sandboxed Java applets, or by supplying data to APIs in the affected component without using sandboxed Java applications. Oracle has released patches addressing this and other vulnerabilities in their April 2016 Critical Patch Update. Exploits have been observed in the wild, emphasizing the importance of applying available fixes.

Apache Tomcat contains a remote code execution vulnerability related to the JmxRemoteLifecycleListener component. This vulnerability arises when the listener is used and an attacker can access Java Management Extension (JMX) ports. The issue stems from the listener not being updated to align with Oracle's fixes for a related vulnerability (CVE-2016-3427) affecting credential types. Exploitation of this vulnerability has been observed in the wild.

CVE-2021-45046 is a high severity vulnerability in Apache Log4j2 involving deserialization of untrusted data. It arises from an incomplete fix of the earlier CVE-2021-44228 vulnerability. The flaw allows remote code execution through the Thread Context Lookup Pattern in certain non-default configurations. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.

CVE-2023-28432 is an information disclosure vulnerability in MinIO cluster deployments where the system returns all environment variables. This can expose sensitive configuration and secret data. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information are provided.

CVE-2017-6742 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code or cause the affected system to reload. This vulnerability has been exploited in the wild. No explicit affected versions or patch information is provided in the input data.

CVE-2019-8526 is a use-after-free vulnerability in Apple macOS that can lead to privilege escalation. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the available data.

CVE-2021-27876 is a high-severity file access vulnerability in the Veritas Backup Exec Agent. It allows attackers to craft specific input parameters in a data management protocol command to access files on the Backup Exec Agent machine. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-27877 is an improper authentication vulnerability in the Veritas Backup Exec Agent. It allows unauthorized attackers to gain access to the Backup Exec Agent by exploiting weaknesses in the SHA authentication scheme. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.