Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 53%	CVE-2022-21971Windows · Microsoft Windows Runtime Remote Code Execution Vulnerability High7.8KEVEPSS 53%2022-08-18CISA KEVCVE-2022-21971 CVE-2022-21971 is a high-severity remote code execution vulnerability in Microsoft Windows Runtime. It allows an attacker to execute arbitrary code remotely. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 53%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-08-18
Critical	9.8	KEVEPSS 98%	CVE-2017-15944PAN-OS · Palo Alto Networks PAN-OS Remote Code Execution Vulnerability Critical9.8KEVEPSS 98%2022-08-18CISA KEVCVE-2017-15944 CVE-2017-15944 is a high-severity vulnerability in Palo Alto Networks PAN-OS that involves multiple unspecified flaws which, when chained, can lead to remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 98%Vulnerability Palo Alto Networks #exploited-in-the-wild	CISA KEV	2022-08-18
Critical	9.8	KEVEPSS 91%	CVE-2022-37042Zimbra Collaboration Suite (ZCS) · Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability Critical9.8KEVEPSS 91%2022-08-11CISA KEVCVE-2022-37042 CVE-2022-37042 is an authentication bypass vulnerability in Synacor Zimbra Collaboration Suite (ZCS) affecting the MailboxImportServlet component. This vulnerability has been exploited in the wild and was chained with CVE-2022-27925 to enable unauthenticated remote code execution. The issue has a high severity level and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 91%Vulnerability Synacor #exploited-in-the-wild	CISA KEV	2022-08-11
High	7.2	KEVEPSS 98%	CVE-2022-27925Zimbra Collaboration Suite (ZCS) · Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability High7.2KEVEPSS 98%2022-08-11CISA KEVCVE-2022-27925 CVE-2022-27925 is a high-severity vulnerability in Synacor Zimbra Collaboration Suite (ZCS) affecting the mboximport functionality. It allows an authenticated attacker to upload arbitrary files, enabling remote code execution. This vulnerability has been exploited in the wild and has been chained with CVE-2022-37042, which permits unauthenticated remote code execution. The vulnerability is known to have been used in ransomware campaigns. KEVEPSS 98%Vulnerability Synacor #exploited-in-the-wild	CISA KEV	2022-08-11
High	7.8	KEVEPSS 67%	CVE-2022-34713Windows · Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability High7.8KEVEPSS 67%2022-08-09CISA KEVCVE-2022-34713 CVE-2022-34713 is a remote code execution vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT) that can be triggered when MSDT is invoked via the URL protocol from a calling application. This vulnerability has been exploited in the wild and is considered high severity. KEVEPSS 67%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-08-09
Critical	9.8	KEVEPSS 99%	CVE-2022-30333UnRAR · RARLAB UnRAR Directory Traversal Vulnerability Critical9.8KEVEPSS 99%2022-08-09CISA KEVCVE-2022-30333 RARLAB UnRAR on Linux and UNIX platforms contains a directory traversal vulnerability that allows attackers to write files outside the intended extraction directory during unpack operations. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. KEVEPSS 99%Vulnerability RARLAB #exploited-in-the-wild	CISA KEV	2022-08-09
Critical	9.8	KEVEPSS 93%	CVE-2022-27924Zimbra Collaboration Suite (ZCS) · Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability Critical9.8KEVEPSS 93%2022-08-04CISA KEVCVE-2022-27924 CVE-2022-27924 is a command injection vulnerability in Synacor Zimbra Collaboration Suite (ZCS) that allows attackers to inject memcache commands, leading to arbitrary cached entry overwrites. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided. KEVEPSS 93%Vulnerability Synacor #exploited-in-the-wild	CISA KEV	2022-08-04
Critical	9.8	KEVEPSS 98%	CVE-2022-26138Confluence · Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability Critical9.8KEVEPSS 98%2022-07-29CISA KEVCVE-2022-26138 The Atlassian Questions For Confluence App contains hard-coded credentials that expose a username and password in plaintext. This vulnerability allows a remote unauthenticated attacker to use these credentials to log into Confluence and access all content available to users in the confluence-users group. The issue is classified as high severity and has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 98%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-07-29
High	7.8	KEVEPSS 18%	CVE-2022-22047Windows · Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability High7.8KEVEPSS 18%2022-07-12CISA KEVCVE-2022-22047 CVE-2022-22047 is a privilege escalation vulnerability in the Microsoft Windows Client Server Runtime Subsystem (CSRSS) that allows an attacker to gain SYSTEM-level privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 18%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-07-12
High	8.1	KEVEPSS 10%	CVE-2022-26925Windows · Microsoft Windows LSA Spoofing Vulnerability High8.1KEVEPSS 10%2022-07-01CISA KEVCVE-2022-26925 CVE-2022-26925 is a spoofing vulnerability in the Microsoft Windows Local Security Authority (LSA) that allows an attacker to coerce a domain controller to authenticate to the attacker using NTLM. This vulnerability has been exploited in the wild and is considered high severity. KEVEPSS 10%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-07-01
Critical	9.8	KEVEPSS 55%	CVE-2022-29499MiVoice Connect · Mitel MiVoice Connect Data Validation Vulnerability Critical9.8KEVEPSS 55%2022-06-27CISA KEVCVE-2022-29499 CVE-2022-29499 is a high-severity vulnerability in the Service Appliance component of Mitel MiVoice Connect that allows remote code execution due to improper data validation. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided in the available data. KEVEPSS 55%Vulnerability Mitel #exploited-in-the-wild	CISA KEV	2022-06-27
Medium	6.5	KEVEPSS 16%	CVE-2021-30533Chromium PopupBlocker · Google Chromium PopupBlocker Security Bypass Vulnerability Medium6.5KEVEPSS 16%2022-06-27CISA KEVCVE-2021-30533 CVE-2021-30533 is a security vulnerability in the Google Chromium PopupBlocker that allows remote attackers to bypass navigation restrictions via a crafted iframe. This flaw affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability is due to insufficient policy enforcement in the PopupBlocker component. KEVEPSS 16%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 2.9%	CVE-2021-30983iOS and iPadOS · Apple iOS and iPadOS Buffer Overflow Vulnerability High7.8KEVEPSS 2.9%2022-06-27CISA KEVCVE-2021-30983 A buffer overflow vulnerability exists in Apple iOS and iPadOS that could allow an application to execute code with kernel privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 2.9%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 14%	CVE-2020-3837Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 14%2022-06-27CISA KEVCVE-2020-3837 A memory corruption vulnerability exists in multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS. This flaw could allow an application to execute code with kernel privileges, potentially leading to full system compromise. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 14%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 3.2%	CVE-2020-9907Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 3.2%2022-06-27CISA KEVCVE-2020-9907 A memory corruption vulnerability exists in Apple iOS, iPadOS, and tvOS that could allow an application to execute code with kernel privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 3.2%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 17%	CVE-2019-8605Multiple Products · Apple Multiple Products Use-After-Free Vulnerability High7.8KEVEPSS 17%2022-06-27CISA KEVCVE-2019-8605 CVE-2019-8605 is a use-after-free vulnerability affecting multiple Apple products including iOS, macOS, tvOS, and watchOS. This flaw could allow a malicious application to execute code with system-level privileges. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 17%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 2.4%	CVE-2018-4344Multiple Products · Apple Multiple Products Memory Corruption Vulnerability High7.8KEVEPSS 2.4%2022-06-27CISA KEVCVE-2018-4344 CVE-2018-4344 is a memory corruption vulnerability affecting multiple Apple products including iOS, macOS, tvOS, and watchOS. This flaw can enable an attacker to execute arbitrary code on the affected devices. The vulnerability has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data. KEVEPSS 2.4%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 94%	CVE-2021-4034Polkit · Red Hat Polkit Out-of-Bounds Read and Write Vulnerability High7.8KEVEPSS 94%2022-06-27CISA KEVCVE-2021-4034 The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights. KEVEPSS 94%Vulnerability Red Hat #exploited-in-the-wild	CISA KEV	2022-06-27
High	7.8	KEVEPSS 99%	CVE-2022-30190Windows · Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability High7.8KEVEPSS 99%2022-06-14CISA KEVCVE-2022-30190 CVE-2022-30190 is a remote code execution vulnerability in the Microsoft Windows Support Diagnostic Tool (MSDT). It occurs when MSDT is invoked via the URL protocol from a calling application such as Microsoft Word. Successful exploitation allows an attacker to execute arbitrary code with the privileges of the calling application. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-06-14
Critical	9.9	KEVEPSS 36%	CVE-2021-38163NetWeaver · SAP NetWeaver Unrestricted File Upload Vulnerability Critical9.9KEVEPSS 36%2022-06-09CISA KEVCVE-2021-38163 CVE-2021-38163 is a high-severity vulnerability in SAP NetWeaver that allows unrestricted file upload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 36%Vulnerability SAP #exploited-in-the-wild	CISA KEV	2022-06-09

Showing 381–400 of 1,164 results