CVE-2022-24521 is a high-severity privilege escalation vulnerability in the Microsoft Windows Common Log File System (CLFS) Driver. The vulnerability is unspecified in detail but has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected Windows versions or patch information is provided in the available data.
CVE-2018-7602 is a high-severity remote code execution vulnerability affecting multiple subsystems within Drupal Core. It enables attackers to exploit various attack vectors on a Drupal site, potentially allowing unauthorized code execution. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2018-20753 is a remote code execution vulnerability in Kaseya Virtual System/Server Administrator (VSA) that allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2015-5123 is a use-after-free vulnerability in the BitmapData class of Adobe Flash Player's ActionScript 3 implementation. This flaw allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-5122 is a use-after-free vulnerability in the DisplayObject class of the ActionScript 3 implementation in Adobe Flash Player. This flaw allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2015-3113 is a heap-based buffer overflow vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2015-2502 is a memory corruption vulnerability in Microsoft Internet Explorer that enables attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data.
CVE-2015-0313 is a use-after-free vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2015-0311 is a high-severity remote code execution vulnerability in Adobe Flash Player. It allows remote attackers to execute arbitrary code on affected systems. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2014-9163 is a stack-based buffer overflow vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-23176 is a high-severity privilege escalation vulnerability affecting WatchGuard Firebox and XTM appliances. It allows a remote attacker with unprivileged credentials to gain privileged management access to the system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-42287 is a high-severity privilege escalation vulnerability in Microsoft Active Directory Domain Services. It allows an attacker to escalate privileges within the Active Directory environment. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2021-42278 is a high-severity privilege escalation vulnerability in Microsoft Active Directory Domain Services. The vulnerability allows an attacker to escalate privileges within an Active Directory environment. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2021-39793 is an out-of-bounds write vulnerability in Google Pixel devices caused by a logic error. This flaw can be exploited locally to escalate privileges. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data.
CVE-2021-27852 is a deserialization of untrusted data vulnerability in Checkbox Survey's CheckboxWeb.dll component. This flaw allows an unauthenticated remote attacker to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information are provided in the available data.
CVE-2021-22600 is a vulnerability in the Linux Kernel's packet socket (AF_PACKET) implementation that can cause incorrect memory freeing. This flaw allows a local user to potentially cause a denial-of-service (DoS) or escalate privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
QNAP Network-Attached Storage (NAS) devices have a command injection vulnerability (CVE-2020-2509) that allows remote attackers to execute arbitrary commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2017-11317 is a vulnerability in Progress Telerik UI for ASP.NET AJAX that allows remote attackers to upload arbitrary files or execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. The affected product is not a cloud service, and no specific affected versions are provided in the available data.
CVE-2021-3156 is a heap-based buffer overflow vulnerability in Sudo caused by an off-by-one error. This flaw allows an attacker to escalate privileges on affected systems. It has been exploited in the wild, indicating active threat usage. The vulnerability is rated as high severity due to its potential impact on system security.
CVE-2021-31166 is a remote code execution vulnerability in the Microsoft HTTP Protocol Stack (http.sys). This flaw allows attackers to execute arbitrary code remotely by exploiting the vulnerable http.sys component. The vulnerability has been exploited in the wild, indicating active attacks leveraging this issue. No specific affected versions are stated in the provided data. The severity is assessed as high due to the potential for remote code execution and active exploitation.