CVE-2025-49704 is a high severity code injection vulnerability in Microsoft SharePoint Enterprise Server 2016 version 16.0.0. It allows an authorized attacker to execute arbitrary code remotely over the network without user interaction. This vulnerability has known exploits in the wild and has been used in ransomware campaigns.
CVE-2019-9621 is a server-side request forgery (SSRF) vulnerability in the ProxyServlet component of Synacor Zimbra Collaboration Suite (ZCS). This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.
PHPMailer contains a command injection vulnerability in its mail() function due to improper sanitization of user input. This flaw allows attackers to execute arbitrary code within the application context. Unsuccessful exploitation attempts can cause denial-of-service conditions. The vulnerability has been exploited in the wild.
Multi-Router Looking Glass (MRLG) has a buffer overflow vulnerability (CVE-2014-3931) that allows remote attackers to perform arbitrary memory writes and cause memory corruption. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2019-5418 is a path traversal vulnerability in Ruby on Rails' Action View component. It allows specially crafted Accept headers combined with calls to `render file:` to cause arbitrary files on the server to be rendered, potentially disclosing their contents. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2025-47812 is a remote code execution vulnerability in Wing FTP Server disclosed in June 2025. It allows unauthenticated attackers to execute arbitrary code, which could lead to full system compromise. No official patch or detailed affected versions have been released yet, and no exploits have been observed in the wild. The vulnerability is considered high risk due to the ease of exploitation without authentication. Current mitigations focus on heightened monitoring, network segmentation, and restricting access to the FTP server until a patch is available. Organizations using Wing FTP Server, especially in Europe, face elevated risk. Defenders should prioritize anomaly detection on FTP traffic and prepare for rapid patch deployment once released.
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.
This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2019-6693 is a vulnerability in Fortinet FortiOS involving the use of hard-coded credentials. This flaw allows an attacker who knows the hard-coded key to decipher sensitive data contained in FortiOS configuration backup files. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2025-48703 is a remote code execution vulnerability in CentOS Web Panel, a widely used web hosting control panel. It allows unauthenticated attackers to execute arbitrary code remotely, potentially leading to full system compromise. No official patches or mitigations have been released yet, and no active exploits are currently known in the wild. The vulnerability is considered high risk due to the ease of exploitation and critical impact on confidentiality, integrity, and availability. Immediate mitigations include restricting network access to the control panel and monitoring for suspicious activity. Organizations using CentOS Web Panel, especially in Europe and other regions with significant deployment, should prioritize network-level protections and prepare for patch deployment once available. This threat poses risks of data breaches, service disruptions, and loss of control over hosting infrastructure. Defenders must act proactively to reduce exposure until official fixes are released.
CVE-2025-32975 is a critical authentication bypass vulnerability in Quest KACE Systems Management Appliance (SMA) that affects the SSO authentication mechanism. It allows attackers to impersonate legitimate users without valid credentials, potentially gaining full administrative control. The vulnerability has a maximum CVSS score of 10.0, indicating severe impact on confidentiality, integrity, and availability. No known exploits have been reported in the wild. The exact affected versions and patch status are not specified; users should consult the vendor advisory for remediation details.
CVE-2025-48700 is a Cross-Site Scripting (XSS) vulnerability affecting Zimbra Collaboration Suite (ZCS) versions 8.8.15, 9.0, 10.0, and 10.1 in the Classic UI. The flaw allows attackers to execute arbitrary JavaScript within a user's session by sending a crafted email containing malicious HTML with an @import directive and other script injection vectors. Exploitation occurs when a user views the malicious email, requiring no further interaction. This can lead to unauthorized access to sensitive information within the affected session. The vulnerability has a CVSS score of 6.
CVE-2025-6218 is a high-severity path traversal vulnerability in RARLAB WinRAR version 7.11 (64-bit) that allows remote attackers to execute arbitrary code. The flaw exists in the handling of file paths within archive files, enabling crafted paths to traverse directories improperly. Exploitation requires user interaction, such as opening a malicious file or visiting a malicious page. The vulnerability permits code execution with the privileges of the current user.
CVE-2025-5777 is a critical out-of-bounds read vulnerability in Citrix NetScaler ADC when configured as a Gateway or AAA virtual server. It results from insufficient input validation, allowing memory overread. The flaw affects versions 13.1 up to but not including 58.32 and 14.1 up to but not including 43.56. Exploitation requires no privileges or user interaction and has been observed in the wild, including use in ransomware campaigns.
An unspecified vulnerability exists in multiple Apple products including iOS, iPadOS, macOS, watchOS, and visionOS when processing maliciously crafted photos or videos shared via iCloud Link. This vulnerability has been exploited in the wild. Apple has released fixes in versions 18.3.1, 16.7.11, 15.8.4, 17.7.5, 15.3.1, 14.7.4, 13.7.4, 2.3.1, and 11.3.1 to address this issue. The vulnerability has a medium severity with a CVSS score of 4.2, indicating limited confidentiality and integrity impact without availability impact.
CVE-2025-33073 is a high-severity vulnerability in Microsoft Windows 10 Version 1507 involving improper access control in the SMB protocol. It allows an authorized attacker to elevate privileges over a network without requiring user interaction. The vulnerability has a CVSS score of 8.8, indicating a significant impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided by the vendor. There are no known exploits in the wild at this time.