CVE-2014-3153 is a Linux kernel vulnerability in the futex_requeue function that allows local users to escalate privileges by exploiting improper checks on futex addresses. This flaw has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2013-7331 is an information disclosure vulnerability in Microsoft Internet Explorer that allows querying of resources loaded into memory. This flaw can enable attackers to detect the presence of anti-malware applications on a victim's system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-3993 is a vulnerability in IBM InfoSphere BigInsights where certain APIs accept invalid input, potentially allowing attackers unauthorized access to read, write, modify, or delete data. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2013-3896 is an information disclosure vulnerability in Microsoft Silverlight caused by improper pointer validation when accessing Silverlight elements. This flaw allows remote attackers to obtain sensitive information by delivering a crafted Silverlight application. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2013-2423 is an unspecified vulnerability in the hotspot component of Oracle Java Runtime Environment (JRE) that allows remote attackers to affect the integrity of the system. It has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
CVE-2013-0431 is a high-severity vulnerability in Oracle's Java Runtime Environment (JRE) that allows remote attackers to bypass the Java security sandbox. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. The specific technical details of the vulnerability are unspecified in the provided data. No affected versions or patch information are provided in the input.
CVE-2013-0422 is a high-severity vulnerability in Oracle Java Runtime Environment (JRE) where improper restriction of Java applet permissions allows remote code execution. This flaw has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2013-0074 is a high-severity vulnerability in Microsoft Silverlight where improper pointer validation during HTML object rendering allows remote attackers to execute arbitrary code via a crafted Silverlight application. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2012-1710 is an unspecified vulnerability in the Oracle WebCenter Forms Recognition component of Oracle Fusion Middleware. It allows remote attackers to impact confidentiality, integrity, and availability through unknown vectors related to the Designer component. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided.
CVE-2010-1428 is a vulnerability in Red Hat JBoss Application Server where the web console's access control is incomplete. While unauthenticated access to the /web-console path is blocked for GET and POST HTTP methods by default, other HTTP verbs are not blocked, allowing remote attackers to access sensitive information. This flaw has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2010-0840 is an unspecified vulnerability in Oracle's Java Runtime Environment (JRE) that allows remote attackers to impact confidentiality, integrity, and availability. The exact attack vectors and technical details are not disclosed. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.
CVE-2010-0738 is an authentication bypass vulnerability in the JMX-Console web application of Red Hat JBoss Enterprise Application Platform. The application improperly enforces access control only on GET and POST HTTP methods, allowing attackers to bypass authentication by using other HTTP methods to access the GET handler remotely. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2018-8611 is a privilege escalation vulnerability in the Microsoft Windows kernel caused by improper handling of objects in memory. This flaw allows attackers to elevate privileges on affected systems. It has been exploited in the wild, indicating active use by threat actors. No specific affected Windows versions or patch information is provided in the available data.
CVE-2018-19953 is a cross-site scripting (XSS) vulnerability in QNAP NAS File Station that allows remote attackers to inject malicious code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2018-19949 is a command injection vulnerability in QNAP NAS File Station that allows remote attackers to execute arbitrary commands. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2018-19943 is a cross-site scripting (XSS) vulnerability in QNAP NAS File Station that allows remote attackers to inject malicious code. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2017-0147 is a high-severity information disclosure vulnerability in the Microsoft Windows SMBv1 server. It allows remote attackers to obtain sensitive information from process memory by sending crafted packets. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2017-0022 is a high-severity information disclosure vulnerability in Microsoft XML Core Services (MSXML). It arises from improper handling of objects in memory, which allows attackers to test for the presence of files on disk via a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-0005 is a privilege escalation vulnerability in the Microsoft Windows Graphics Device Interface (GDI) that allows local users to gain elevated privileges by running a specially crafted application. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
Microsoft Internet Explorer has a memory corruption vulnerability (CVE-2017-0149) that allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) by tricking users into visiting a crafted website. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.