CVE-2016-2388 is a high-severity information disclosure vulnerability in SAP NetWeaver AS JAVA 7.4. It allows remote attackers to obtain sensitive user information by sending a crafted HTTP request to the Universal Worklist Configuration component. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-38163 is a high-severity vulnerability in SAP NetWeaver that allows unrestricted file upload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided.
CVE-2019-7193 is an improper input validation vulnerability in QNAP QTS that allows remote attackers to inject code on the system. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player has a memory corruption vulnerability (CVE-2012-0754) that can be exploited remotely to execute arbitrary code or cause a denial-of-service condition. This vulnerability has been observed in the wild. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player contains a cross-site scripting (XSS) vulnerability that allows remote attackers to inject web script or HTML. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
QNAP NAS devices running Photo Station have an improper access control vulnerability (CVE-2019-7192) that allows remote attackers to gain unauthorized access. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
QNAP Photo Station contains a path traversal vulnerability that allows remote attackers to access or modify system files. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It affects QNAP devices running Photo Station. No specific affected versions or patch information is provided.
Microsoft Office contains a vulnerability in its handling of object records within Excel files. This flaw allows remote attackers to execute arbitrary code by crafting a malicious Excel file with a malformed record object. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player contains a memory corruption vulnerability (CVE-2010-1297) that can be exploited by remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Microsoft XML Core Services contains a memory corruption vulnerability that could allow remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-5030 is a memory corruption vulnerability in the Google Chromium V8 JavaScript engine that allows remote code execution via a crafted HTML page. This flaw affects multiple web browsers using Chromium's V8 engine, including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2017-5070 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that allows remote attackers to execute code within the sandbox by delivering a crafted HTML page. This affects multiple Chromium-based browsers including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild.
A buffer overflow vulnerability exists in Microsoft Office that can be triggered by a specially crafted Word document containing a tag with an invalid length field. This flaw allows remote attackers to execute arbitrary code on the affected system. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
Adobe Acrobat and Reader have a buffer overflow vulnerability that can be triggered by a specially crafted PDF file containing long arguments to certain JavaScript methods. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2012-4969 is a use-after-free vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild, indicating active attacks leveraging this flaw. No specific affected versions or patch information is provided in the input data.
Microsoft PowerPoint contains a buffer overflow vulnerability (CVE-2010-2572) that allows remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Multiple NETGEAR devices are affected by a buffer overflow vulnerability that enables authentication bypass and remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2019-5825 is an out-of-bounds write vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple web browsers that use Chromium's V8 engine, including Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No specific affected versions or patch information is provided in the available data.
Adobe Flash Player has an integer overflow vulnerability (CVE-2012-5054) that enables remote attackers to execute arbitrary code by supplying malformed arguments. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.