Multiple WSO2 products have a vulnerability that allows unrestricted file upload, which can lead to remote code execution. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patches are provided in the available data.
CVE-2022-26904 is a high-severity privilege escalation vulnerability in the Microsoft Windows User Profile Service. It allows an attacker to escalate privileges on affected Windows systems. The vulnerability has been exploited in the wild. Specific affected versions and detailed technical information are not provided in the available data.
CVE-2022-21919 is a high-severity privilege escalation vulnerability in the Microsoft Windows User Profile Service. It allows an attacker to elevate privileges on affected Windows systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-0847, known as 'Dirty Pipe,' is a Linux kernel vulnerability that allows an unprivileged local user to escalate their privileges due to improper initialization. It has been exploited in the wild, posing a high risk to affected systems.
CVE-2021-41357 is a high-severity privilege escalation vulnerability in Microsoft Win32k. It allows an attacker to elevate privileges on an affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-40450 is a high-severity privilege escalation vulnerability in Microsoft Win32k. It allows an attacker to elevate privileges on an affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2019-1003029 is a vulnerability in the Jenkins Script Security Plugin that allows attackers to bypass the sandbox protection mechanism. This flaw enables malicious scripts to execute outside the intended restricted environment, potentially leading to unauthorized code execution. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
Synacor Zimbra Collaboration Suite (ZCS) has a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2019-3568 is a buffer overflow vulnerability in the WhatsApp VOIP stack that allows remote code execution when a specially crafted series of RTCP packets are sent to a target phone number. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2022-22718 is a high-severity privilege escalation vulnerability in the Microsoft Windows Print Spooler service. It allows an attacker to elevate privileges on affected Windows systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2022-22960 is a privilege escalation vulnerability affecting multiple VMware products including Workspace ONE Access, Identity Manager, and vRealize Automation. The issue arises from improper permissions set on support scripts, allowing unauthorized privilege escalation. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-1364 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based web browsers, including Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No specific affected versions or patch information is provided in the input data.
Multiple Crestron products have a command injection vulnerability via the file_transfer.cgi HTTP endpoint. This flaw allows a remote, unauthenticated attacker to execute operating system commands with root privileges. The vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.
The D-Link DNS-320 storage device contains a remote code execution vulnerability in the login_mgr.cgi script. This vulnerability allows attackers to execute arbitrary code remotely. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided.
CVE-2018-7841 is a SQL Injection vulnerability in Schneider Electric's U.motion Builder software. This flaw allows an attacker to execute unwanted code by entering specially crafted characters. It has been exploited in the wild and is considered a high severity issue. No specific affected versions or patch information are provided.
CVE-2016-4523 is a denial-of-service vulnerability in the WAP interface of Trihedral VTScada (formerly VTS) that allows remote attackers to disrupt service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2014-0780 is a directory traversal vulnerability in InduSoft Web Studio's NTWebServer component. This flaw allows remote attackers to read administrative passwords stored in APP files, which can lead to remote code execution. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
Certain Ubiquiti AirOS devices are affected by a command injection vulnerability via a GET request to stainfo.cgi. This vulnerability allows an attacker to execute arbitrary commands on the affected device. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided.
CVE-2007-3010 is a remote code execution vulnerability in the masterCGI component of the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server. This flaw allows remote attackers to execute arbitrary commands on the affected system. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2022-22954 is a high-severity vulnerability in VMware Workspace ONE Access and Identity Manager that allows remote code execution via server-side template injection. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.