IBM Aspera Faspex contains a high-severity vulnerability (CVE-2022-47986) due to a YAML deserialization flaw that allows remote code execution. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information are provided in the available data.
CVE-2022-41223 is a code injection vulnerability in the Director component of Mitel MiVoice Connect. It allows an authenticated attacker with internal network access to execute arbitrary code within the application context. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
Cacti contains a command injection vulnerability (CVE-2022-46169) that allows an unauthenticated attacker to execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2015-2291 is a high-severity denial-of-service vulnerability in Intel Ethernet Diagnostics Driver for Windows (IQVW32.sys and IQVW64.sys). The vulnerability allows an attacker to cause a denial-of-service condition. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
TerraMaster OS has a remote command execution vulnerability (CVE-2022-24990) that allows unauthenticated attackers to execute arbitrary commands on affected devices. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2022-21587 is an unspecified vulnerability in Oracle E-Business Suite that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. Oracle has released security patches addressing this and other vulnerabilities in their October 2022 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.
CVE-2017-11357 is an insecure direct object reference vulnerability in Telerik UI for ASP.NET AJAX's RadAsyncUpload component. This flaw can allow attackers to upload files to restricted locations, potentially leading to remote code execution. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
Multiple Zoho ManageEngine products have an unauthenticated remote code execution vulnerability caused by the use of an outdated Apache Santuario library. This vulnerability allows attackers to execute arbitrary code remotely without authentication. It has a critical severity with a CVSS score of 9.8 and is known to be exploited in the wild, including use in ransomware campaigns.
CWP Control Web Panel (formerly CentOS Web Panel) has an OS command injection vulnerability that enables remote attackers to execute arbitrary commands via shell metacharacters in the login parameter. This vulnerability is known to be exploited in the wild and is considered high severity.
CVE-2022-41080 is a privilege escalation vulnerability in Microsoft Exchange Server. It can be combined with CVE-2022-41082, which allows remote code execution, to facilitate more severe attacks. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2018-5430 is a vulnerability in TIBCO JasperReports Server that allows any authenticated user to gain read-only access to the web application's contents, including important configuration files. This information disclosure flaw has been exploited in the wild and is considered high severity.
CVE-2018-18809 is a directory traversal vulnerability in TIBCO JasperReports Library that allows web server users to access arbitrary files on the host system. This vulnerability has been exploited in the wild and is considered high severity due to the potential exposure of sensitive system files.
Apple iOS contains a type confusion vulnerability (CVE-2022-42856) that can be triggered by processing maliciously crafted web content, potentially allowing code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
Microsoft Defender SmartScreen has a security feature bypass vulnerability (CVE-2022-44698) that allows attackers to evade Mark of the Web (MOTW) protections using specially crafted malicious files. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
Fortinet FortiOS SSL-VPN contains a heap-based buffer overflow vulnerability that allows unauthenticated remote attackers to execute arbitrary code or commands. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2022-27518 is an authentication bypass vulnerability in Citrix Application Delivery Controller (ADC) and Gateway when configured with SAML SP or IdP. This flaw allows attackers to bypass authentication and execute code with administrator privileges. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2022-26501 is a remote code execution vulnerability in Veeam Backup & Replication's Distribution Service. It allows unauthenticated attackers to access internal API functions and potentially upload and execute malicious code remotely. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2022-26500 is a remote code execution vulnerability in Veeam Backup & Replication's Distribution Service. It allows unauthenticated attackers to access internal API functions and potentially upload and execute malicious code remotely. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2022-4262 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that can be exploited remotely via a crafted HTML page. This flaw may lead to heap corruption and affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-35587 is a high severity vulnerability in Oracle Fusion Middleware Access Manager that allows an unauthenticated attacker with network access via HTTP to take over the Access Manager product. This vulnerability has been exploited in the wild. Oracle has released patches addressing this and other vulnerabilities in their January 2022 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.