CVE-2022-3075 is an insufficient data validation vulnerability in Google Chromium Mojo that allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild.
CVE-2018-2628 is an unspecified vulnerability in Oracle WebLogic Server that allows an unauthenticated attacker with T3 network access to compromise the server. The vulnerability has been exploited in the wild. Oracle released patches addressing this and other vulnerabilities in their April 2018 Critical Patch Update. Oracle strongly recommends applying these patches promptly to mitigate the risk.
CVE-2018-13374 is an improper access control vulnerability in Fortinet FortiOS and FortiADC. It allows attackers to retrieve LDAP server login credentials configured in FortiGate by directing an LDAP server connectivity test to a malicious LDAP server. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2011-1823 is a privilege escalation vulnerability in the Android OS where the vold volume manager daemon trusts messages from a PF_NETLINK socket. This flaw allows attackers to execute code with root privileges. It has been exploited in the wild and is associated with known Android malware such as GingerBreak and Lotoor.
The D-Link DIR-300 router has a vulnerability where it stores passwords in cleartext. This weakness allows attackers with certain access to retrieve sensitive password information. The issue is known to be exploited in the wild and is considered a high-severity security risk.
CVE-2022-26352 is a vulnerability in dotCMS's ContentResource API that allows unrestricted file uploads with dangerous file types. This flaw enables directory traversal, permitting an attacker to save files outside the intended storage location. Successful exploitation can lead to remote code execution. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2020-36193 is a directory traversal vulnerability in the PEAR Archive_Tar package's Tar.php script. It allows remote attackers to perform write operations outside the intended directory by exploiting inadequate symbolic link checks, potentially modifying arbitrary files. The vulnerability affects PHP components used in third-party products such as Drupal Core and Red Hat Linux. Red Hat has provided advisories but no patches for end-of-life PHP versions 7.2 and 7.3. Exploitation in the wild has been observed.
CVE-2020-28949 is a vulnerability in the PEAR Archive_Tar PHP package that allows a local authenticated attacker to bypass security restrictions via a stream-wrapper attack. This flaw enables overwriting arbitrary files on the system using a specially crafted tar archive. The vulnerability arises because the package blocks the 'phar:' stream wrapper but not 'PHAR:', leading to improper filename sanitization. PHP versions 7.2, 7.3, and 7.4 are deprecated, and no patches are planned for php-pear. Red Hat has analyzed affected products and may release fixes or mitigations depending on the product lifecycle and impact. Exploits are known in the wild.
Apache CouchDB has a vulnerability due to insecure default initialization of resources, which can allow attackers to escalate privileges to administrative level. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Grafana contains an authentication bypass vulnerability (CVE-2021-39226) that allows both authenticated and unauthenticated users to view and delete all snapshot data. This can lead to complete loss of snapshot data. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
CVE-2022-24112 is an authentication bypass vulnerability in Apache APISIX that enables remote code execution. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information are provided in the available data.
CVE-2022-2294 is a heap buffer overflow vulnerability in WebRTC, an open-source project used by web browsers for real-time communication. This flaw allows attackers to execute arbitrary shellcode. It affects web browsers that incorporate WebRTC, including Google Chrome. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2021-31010 is a high-severity vulnerability affecting Apple iOS, macOS, and watchOS. It allows a sandboxed process to potentially bypass sandbox restrictions. The vulnerability has been exploited in the wild. However, official Apple advisories linked in the source are unavailable, and no explicit patch or remediation details are provided in the input data.
CVE-2022-22963 is a high severity remote code execution vulnerability in VMware Tanzu Spring Cloud Function. It arises from the routing functionality where a specially crafted Spring Expression Language (SpEL) routing-expression can be used by an attacker to execute arbitrary code and access local resources. This vulnerability has been exploited in the wild.
CVE-2022-0028 is a vulnerability in Palo Alto Networks PAN-OS where a URL filtering policy misconfiguration can enable a network attacker to perform reflected and amplified TCP denial-of-service (RDoS) attacks. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2022-21971 is a high-severity remote code execution vulnerability in Microsoft Windows Runtime. It allows an attacker to execute arbitrary code remotely. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-15944 is a high-severity vulnerability in Palo Alto Networks PAN-OS that involves multiple unspecified flaws which, when chained, can lead to remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2022-32894 is an out-of-bounds write vulnerability in Apple iOS and macOS that could allow an application to execute code with kernel privileges. The vulnerability is known to be exploited in the wild. The official Apple advisory link is unavailable, and no explicit patch or remediation details are provided in the source data.
CVE-2022-32893 is an out-of-bounds write vulnerability in Apple iOS and macOS that could allow remote code execution when processing specially crafted web content. The vulnerability has been exploited in the wild. No official vendor advisory or patch information is currently available.
CVE-2022-2856 is a high-severity vulnerability in Google Chromium Intents involving insufficient validation of untrusted input. This flaw allows a remote attacker to cause a user to browse to a malicious website via a crafted HTML page. Multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera, may be affected. Exploitation in the wild has been observed. No explicit patch or remediation details are provided in the available data.