CVE-2014-3153 is a Linux kernel vulnerability in the futex_requeue function that allows local users to escalate privileges by exploiting improper checks on futex addresses. This flaw has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2010-0738 is an authentication bypass vulnerability in the JMX-Console web application of Red Hat JBoss Enterprise Application Platform. The application improperly enforces access control only on GET and POST HTTP methods, allowing attackers to bypass authentication by using other HTTP methods to access the GET handler remotely. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2014-4077 is a privilege escalation vulnerability in Microsoft Input Method Editor (IME) Japanese, specifically involving the IMJPDCT.EXE component. This vulnerability allows attackers to bypass sandbox restrictions and escalate privileges on affected Windows systems. The IME Japanese keyboard is included by default in Windows but is disabled by default. Exploitation of this vulnerability has been observed in the wild.
CVE-2014-4123 is a high-severity privilege escalation vulnerability in Microsoft Internet Explorer. It allows remote attackers to gain elevated privileges by tricking users into visiting a crafted website. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2012-1710 is an unspecified vulnerability in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware. It allows remote attackers to impact confidentiality, integrity, and availability through unknown vectors related to the Designer component. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided.
CVE-2014-4148 is a high-severity remote code execution vulnerability in Microsoft Windows. It arises from improper handling of TrueType fonts by a Windows kernel-mode driver. This vulnerability has been exploited in the wild.
CVE-2010-0840 is an unspecified vulnerability in Oracle's Java Runtime Environment (JRE) that allows remote attackers to impact confidentiality, integrity, and availability. The exact attack vectors and technical details are not disclosed. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.
CVE-2014-8439 is a high-severity vulnerability in Adobe Flash Player involving improper handling of a dereferenced memory pointer. This flaw can lead to arbitrary code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2010-1428 is a vulnerability in Red Hat JBoss Application Server where the web console's access control is incomplete. While unauthenticated access to the /web-console path is blocked for GET and POST HTTP methods by default, other HTTP verbs are not blocked, allowing remote attackers to access sensitive information. This flaw has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2015-0016 is a directory traversal vulnerability in the TS WebProxy component of Microsoft Windows that allows remote attackers to escalate privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2015-0071 is a vulnerability in Microsoft Internet Explorer that allows remote attackers to bypass the address space layout randomization (ASLR) protection mechanism via a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-0310 is a vulnerability in Adobe Flash Player where the software does not properly restrict the discovery of memory addresses. This flaw allows attackers to bypass the address space layout randomization (ASLR) protection mechanism, which is designed to prevent exploitation by randomizing memory locations. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2015-1671 is a remote code execution vulnerability in Microsoft Windows and related components including .NET Framework, Office, Lync, and Silverlight. The flaw arises from improper handling of TrueType fonts, allowing attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2015-1769 is a privilege escalation vulnerability in Microsoft Windows affecting the Mount Manager component. It arises from improper processing of symbolic links, allowing an attacker to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected Windows versions or patch information are provided in the available data.
CVE-2013-0074 is a high-severity vulnerability in Microsoft Silverlight where improper pointer validation during HTML object rendering allows remote attackers to execute arbitrary code via a crafted Silverlight application. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2013-0422 is a high-severity vulnerability in Oracle Java Runtime Environment (JRE) where improper restriction of Java applet permissions allows remote code execution. This flaw has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2015-2360 is a privilege escalation vulnerability in the Win32k.sys kernel-mode driver in Microsoft Windows. It allows local users to gain elevated privileges or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-0431 is a high-severity vulnerability in Oracle's Java Runtime Environment (JRE) that allows remote attackers to bypass the Java security sandbox. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. The specific technical details of the vulnerability are unspecified in the provided data. No affected versions or patch information are provided in the input.
CVE-2015-2425 is a memory corruption vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2019-3010 is a privilege escalation vulnerability in the XScreenSaver component of Oracle Solaris. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.