SimpleHelp contains a critical authentication bypass vulnerability in its OIDC authentication flow. The vulnerability allows remote unauthenticated attackers to submit forged identity tokens without cryptographic signature verification, resulting in fully authenticated technician sessions. This flaw may also bypass multi-factor authentication in some configurations. The vulnerability has a high CVSS score of 9.5 and is known to be exploited in the wild.
Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.
CVE-2022-0492 is an improper authentication vulnerability in the Linux Kernel's cgroups v1 release_agent feature that can lead to privilege escalation. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information are provided in the available data.
Langflow suffers from an origin validation error vulnerability due to an overly permissive CORS configuration combined with a refresh token cookie set as SameSite=None. This flaw allows malicious webpages to perform cross-origin requests with credentials, enabling calls to the refresh endpoint. Exploitation can lead to arbitrary code execution and full system compromise by leveraging obtained tokens that grant access to authenticated endpoints.
Microsoft Internet Explorer contains a use-after-free vulnerability (CVE-2010-0249) that allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The affected product may be end-of-life or end-of-service, and users are advised to discontinue its use.
Microsoft Internet Explorer contains a use-after-free vulnerability that allows remote attackers to execute arbitrary code by accessing an invalid pointer after an object has been deleted. The affected product may be end-of-life or end-of-service, and users are advised to discontinue its use. This vulnerability has been exploited in the wild.
Microsoft DirectX contains a vulnerability in the QuickTime Movie Parser Filter within quartz.dll in DirectShow that allows a NULL byte overwrite. This flaw can be exploited by remote attackers using a crafted QuickTime media file to execute arbitrary code. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
Adobe Acrobat and Reader have a heap-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by using a specially crafted PDF file. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2008-4250 is a buffer overflow vulnerability in the Windows Server Service of Microsoft Windows. It allows remote attackers to execute arbitrary code by sending a specially crafted RPC request that triggers an overflow during path canonicalization. This vulnerability has been exploited in the wild and is considered high severity.
Samsung MagicINFO 9 Server contains a path traversal vulnerability (CVE-2024-7399) that allows an attacker with limited privileges to write arbitrary files with system authority. This vulnerability has a high severity score of 8.8 and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-27351 is an improper authentication vulnerability in PaperCut NG/MF that allows remote attackers to bypass authentication via the SecurityRequestFilter class. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
Microsoft Office Excel contains a remote code execution vulnerability (CVE-2009-0238) that allows an attacker to take complete control of an affected system if a user opens a specially crafted Excel file containing a malformed object. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Microsoft Visual Basic for Applications (VBA) contains an insecure library loading vulnerability (CVE-2012-1854) that could allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2023-36424 is a high-severity out-of-bounds read vulnerability in the Microsoft Windows Common Log File System Driver. This flaw can be exploited by a threat actor with limited privileges to escalate their privileges on the affected system. The vulnerability has been observed exploited in the wild. No specific affected Windows versions or patch information is provided in the available data.
CVE-2023-21529 is a deserialization vulnerability in Microsoft Exchange Server that allows an authenticated attacker to execute remote code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2020-9715 is a use-after-free vulnerability in Adobe Acrobat that can lead to remote code execution. The vulnerability has been exploited in the wild. It requires user interaction and local access to the vulnerable system. The vulnerability has a high severity rating with a CVSS score of 7.8.
Craft CMS has a critical code injection vulnerability (CVE-2025-32432) that allows remote attackers to execute arbitrary code without authentication. This vulnerability has a CVSS score of 10.0, indicating maximum severity, and is known to be exploited in the wild. No specific affected versions or patches have been provided in the available data.
Laravel Livewire contains a code injection vulnerability that can allow unauthenticated attackers to execute remote commands under specific conditions. This vulnerability is identified as CVE-2025-54068 and has been exploited in the wild. No specific affected versions or patches are currently provided. The severity is assessed as high due to the potential for remote code execution.
CVE-2021-22054 is a server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM). It allows a malicious actor with network access to the UEM to send unauthorized requests and potentially access sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Multiple Hikvision products have an improper authentication vulnerability that allows malicious users to escalate privileges and access sensitive information. This vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.