Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	KEVEPSS 99%	CVE-2022-40684Multiple Products · Fortinet Multiple Products Authentication Bypass Vulnerability Critical9.8KEVEPSS 99%2022-10-11CISA KEVCVE-2022-40684 CVE-2022-40684 is an authentication bypass vulnerability affecting multiple Fortinet products including FortiOS, FortiProxy, and FortiSwitchManager. This flaw allows unauthenticated attackers to perform administrative operations via specially crafted HTTP or HTTPS requests. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Fortinet #exploited-in-the-wild	CISA KEV	2022-10-11
High	8.0	KEVEPSS 99%	CVE-2022-41082Exchange Server · Microsoft Exchange Server Remote Code Execution Vulnerability High8.0KEVEPSS 99%2022-09-30CISA KEVCVE-2022-41082 CVE-2022-41082 is a high-severity vulnerability in Microsoft Exchange Server that allows authenticated remote code execution. Known as "ProxyNotShell," it can be chained with CVE-2022-41040 to achieve remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-30
High	8.8	KEVEPSS 99%	CVE-2022-41040Exchange Server · Microsoft Exchange Server Server-Side Request Forgery Vulnerability High8.8KEVEPSS 99%2022-09-30CISA KEVCVE-2022-41040 CVE-2022-41040 is a server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server, known as "ProxyNotShell." It can be chained with CVE-2022-41082 to achieve remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-30
High	8.8	KEVEPSS 99%	CVE-2022-36804Bitbucket Server and Data Center · Atlassian Bitbucket Server and Data Center Command Injection Vulnerability High8.8KEVEPSS 99%2022-09-30CISA KEVCVE-2022-36804 CVE-2022-36804 is a command injection vulnerability affecting multiple API endpoints in Atlassian Bitbucket Server and Data Center. An attacker with access to a public repository or read permissions on a private repository can execute arbitrary code by sending a crafted HTTP request. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-09-30
Critical	9.8	KEVEPSS 98%	CVE-2022-3236Firewall · Sophos Firewall Code Injection Vulnerability Critical9.8KEVEPSS 98%2022-09-23CISA KEVCVE-2022-3236 A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution. KEVEPSS 98%Vulnerability Sophos #exploited-in-the-wild	CISA KEV	2022-09-23
Critical	9.8	KEVEPSS 99%	CVE-2022-35405ManageEngine · Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-09-22CISA KEVCVE-2022-35405 CVE-2022-35405 is a high-severity remote code execution vulnerability affecting multiple Zoho ManageEngine products, including PAM360, Password Manager Pro, and Access Manager Plus. The vulnerability is unspecified in detail but has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 99%Vulnerability Zoho #exploited-in-the-wild	CISA KEV	2022-09-22
High	7.8	KEVEPSS 89%	CVE-2010-2568Windows · Microsoft Windows Remote Code Execution Vulnerability High7.8KEVEPSS 89%2022-09-15CISA KEVCVE-2010-2568 Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user. KEVEPSS 89%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.4	KEVEPSS 47%	CVE-2013-2094Kernel · Linux Kernel Privilege Escalation Vulnerability High8.4KEVEPSS 47%2022-09-15CISA KEVCVE-2013-2094 Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation. KEVEPSS 47%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.8	KEVEPSS 3.2%	CVE-2013-2596Kernel · Linux Kernel Integer Overflow Vulnerability High7.8KEVEPSS 3.2%2022-09-15CISA KEVCVE-2013-2596 Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation. KEVEPSS 3.2%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.4	KEVEPSS 1.5%	CVE-2013-2597ACDB Audio Driver · Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability High8.4KEVEPSS 1.5%2022-09-15CISA KEVCVE-2013-2597 The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android. KEVEPSS 1.5%Vulnerability Code Aurora #exploited-in-the-wild	CISA KEV	2022-09-15
High	8.8	KEVEPSS 39%	CVE-2013-6282Kernel · Linux Kernel Improper Input Validation Vulnerability High8.8KEVEPSS 39%2022-09-15CISA KEVCVE-2013-6282 The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation. KEVEPSS 39%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.2	KEVEPSS 3.3%	CVE-2022-40139Apex One and Apex One as a Service · Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability High7.2KEVEPSS 3.3%2022-09-15CISA KEVCVE-2022-40139 CVE-2022-40139 is a high severity vulnerability in Trend Micro Apex One and Apex One as a Service involving improper validation of rollback mechanism components. This flaw could allow remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 3.3%Vulnerability Trend Micro #exploited-in-the-wild	CISA KEV	2022-09-15
High	7.8	KEVEPSS 28%	CVE-2022-37969Windows · Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability High7.8KEVEPSS 28%2022-09-14CISA KEVCVE-2022-37969 CVE-2022-37969 is a high-severity privilege escalation vulnerability in the Microsoft Windows Common Log File System (CLFS) driver. The vulnerability is unspecified in detail but has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 28%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-09-14
High	7.8	KEVEPSS 5.6%	CVE-2022-32917iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability High7.8KEVEPSS 5.6%2022-09-14CISA KEVCVE-2022-32917 CVE-2022-32917 is a high-severity vulnerability in the Apple kernel used by iOS, iPadOS, and macOS. It allows an application to execute code with kernel privileges, potentially leading to full system compromise. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 5.6%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-09-14
Critical	9.6	KEVEPSS 5.8%	CVE-2022-3075Chromium Mojo · Google Chromium Mojo Insufficient Data Validation Vulnerability Critical9.6KEVEPSS 5.8%2022-09-08CISA KEVCVE-2022-3075 CVE-2022-3075 is an insufficient data validation vulnerability in Google Chromium Mojo that allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. KEVEPSS 5.8%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	10.0	KEVEPSS 87%	CVE-2022-27593Photo Station · QNAP Photo Station Externally Controlled Reference Vulnerability Critical10.0KEVEPSS 87%2022-09-08CISA KEVCVE-2022-27593 QNAP Photo Station on certain NAS devices exposed to the internet contains an externally controlled reference vulnerability that allows attackers to modify system files. This vulnerability has been exploited in the wild, notably in a Deadbolt ransomware campaign. The vulnerability is classified as high severity due to its impact on system integrity and active exploitation. KEVEPSS 87%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.8	KEVEPSS 91%	CVE-2022-26258DIR-820L · D-Link DIR-820L Remote Code Execution Vulnerability Critical9.8KEVEPSS 91%2022-09-08CISA KEVCVE-2022-26258 The D-Link DIR-820L router has a remote code execution vulnerability related to the Device Name parameter in the /lan.asp page. This vulnerability allows attackers to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 91%Vulnerability D-Link #exploited-in-the-wild	CISA KEV	2022-09-08
Medium	5.5	KEVEPSS 3.2%	CVE-2020-9934iOS, iPadOS, and macOS · Apple iOS, iPadOS, and macOS Input Validation Vulnerability Medium5.5KEVEPSS 3.2%2022-09-08CISA KEVCVE-2020-9934 CVE-2020-9934 is an input validation vulnerability in Apple iOS, iPadOS, and macOS that allows a local attacker to view sensitive user information. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided, and the official Apple advisory link is unavailable. KEVEPSS 3.2%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.8	KEVEPSS 60%	CVE-2018-7445RouterOS · MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability Critical9.8KEVEPSS 60%2022-09-08CISA KEVCVE-2018-7445 CVE-2018-7445 is a stack-based buffer overflow vulnerability in MikroTik RouterOS that occurs when processing NetBIOS session request messages. Remote attackers with access to the vulnerable service can exploit this flaw to execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 60%Vulnerability MikroTik #exploited-in-the-wild	CISA KEV	2022-09-08
Critical	9.8	KEVEPSS 96%	CVE-2018-6530Multiple Routers · D-Link Multiple Routers OS Command Injection Vulnerability Critical9.8KEVEPSS 96%2022-09-08CISA KEVCVE-2018-6530 Multiple D-Link routers are affected by an OS command injection vulnerability (CVE-2018-6530) that allows attackers to execute arbitrary operating system commands. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. Specific affected versions are not detailed in the available information. KEVEPSS 96%Vulnerability D-Link #exploited-in-the-wild	CISA KEV	2022-09-08

Showing 341–360 of 1,164 results