Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 7.1%	CVE-2022-24521Windows · Microsoft Windows CLFS Driver Privilege Escalation Vulnerability High7.8KEVEPSS 7.1%2022-04-13CISA KEVCVE-2022-24521 CVE-2022-24521 is a high-severity privilege escalation vulnerability in the Microsoft Windows Common Log File System (CLFS) Driver. The vulnerability is unspecified in detail but has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected Windows versions or patch information is provided in the available data. KEVEPSS 7.1%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-13
High	8.1	KEVEPSS 99%	CVE-2018-7602Core · Drupal Core Remote Code Execution Vulnerability High8.1KEVEPSS 99%2022-04-13CISA KEVCVE-2018-7602 CVE-2018-7602 is a high-severity remote code execution vulnerability affecting multiple subsystems within Drupal Core. It enables attackers to exploit various attack vectors on a Drupal site, potentially allowing unauthorized code execution. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. KEVEPSS 99%Vulnerability Drupal #exploited-in-the-wild	CISA KEV	2022-04-13
Critical	9.8	KEVEPSS 29%	CVE-2018-20753Virtual System/Server Administrator (VSA) · Kaseya VSA Remote Code Execution Vulnerability Critical9.8KEVEPSS 29%2022-04-13CISA KEVCVE-2018-20753 CVE-2018-20753 is a remote code execution vulnerability in Kaseya Virtual System/Server Administrator (VSA) that allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 29%Vulnerability Kaseya #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 18%	CVE-2015-5123Flash Player · Adobe Flash Player Use-After-Free Vulnerability High7.8KEVEPSS 18%2022-04-13CISA KEVCVE-2015-5123 CVE-2015-5123 is a use-after-free vulnerability in the BitmapData class of Adobe Flash Player's ActionScript 3 implementation. This flaw allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 18%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 93%	CVE-2015-5122Flash Player · Adobe Flash Player Use-After-Free Vulnerability High7.8KEVEPSS 93%2022-04-13CISA KEVCVE-2015-5122 CVE-2015-5122 is a use-after-free vulnerability in the DisplayObject class of the ActionScript 3 implementation in Adobe Flash Player. This flaw allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 93%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 99%	CVE-2015-3113Flash Player · Adobe Flash Player Heap-Based Buffer Overflow Vulnerability High7.8KEVEPSS 99%2022-04-13CISA KEVCVE-2015-3113 CVE-2015-3113 is a heap-based buffer overflow vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 99%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	8.8	KEVEPSS 51%	CVE-2015-2502Internet Explorer · Microsoft Internet Explorer Memory Corruption Vulnerability High8.8KEVEPSS 51%2022-04-13CISA KEVCVE-2015-2502 CVE-2015-2502 is a memory corruption vulnerability in Microsoft Internet Explorer that enables attackers to execute arbitrary code or cause a denial-of-service (DoS) condition. It has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information is provided in the available data. KEVEPSS 51%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 95%	CVE-2015-0313Flash Player · Adobe Flash Player Use-After-Free Vulnerability High7.8KEVEPSS 95%2022-04-13CISA KEVCVE-2015-0313 CVE-2015-0313 is a use-after-free vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 95%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 85%	CVE-2015-0311Flash Player · Adobe Flash Player Remote Code Execution Vulnerability High7.8KEVEPSS 85%2022-04-13CISA KEVCVE-2015-0311 CVE-2015-0311 is a high-severity remote code execution vulnerability in Adobe Flash Player. It allows remote attackers to execute arbitrary code on affected systems. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 85%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	7.8	KEVEPSS 20%	CVE-2014-9163Flash Player · Adobe Flash Player Stack-Based Buffer Overflow Vulnerability High7.8KEVEPSS 20%2022-04-13CISA KEVCVE-2014-9163 CVE-2014-9163 is a stack-based buffer overflow vulnerability in Adobe Flash Player that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 20%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-04-13
High	8.8	KEVEPSS 10%	CVE-2022-23176Firebox and XTM · WatchGuard Firebox and XTM Privilege Escalation Vulnerability High8.8KEVEPSS 10%2022-04-11CISA KEVCVE-2022-23176 CVE-2022-23176 is a high-severity privilege escalation vulnerability affecting WatchGuard Firebox and XTM appliances. It allows a remote attacker with unprivileged credentials to gain privileged management access to the system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 10%Vulnerability WatchGuard #exploited-in-the-wild	CISA KEV	2022-04-11
High	7.5	KEVEPSS 77%	CVE-2021-42287Active Directory · Microsoft Active Directory Domain Services Privilege Escalation Vulnerability High7.5KEVEPSS 77%2022-04-11CISA KEVCVE-2021-42287 CVE-2021-42287 is a high-severity privilege escalation vulnerability in Microsoft Active Directory Domain Services. It allows an attacker to escalate privileges within the Active Directory environment. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 77%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-11
High	7.5	KEVEPSS 73%	CVE-2021-42278Active Directory · Microsoft Active Directory Domain Services Privilege Escalation Vulnerability High7.5KEVEPSS 73%2022-04-11CISA KEVCVE-2021-42278 CVE-2021-42278 is a high-severity privilege escalation vulnerability in Microsoft Active Directory Domain Services. The vulnerability allows an attacker to escalate privileges within an Active Directory environment. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 73%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-11
High	7.8	KEVEPSS 0.7%	CVE-2021-39793Pixel · Google Pixel Out-of-Bounds Write Vulnerability High7.8KEVEPSS 0.7%2022-04-11CISA KEVCVE-2021-39793 CVE-2021-39793 is an out-of-bounds write vulnerability in Google Pixel devices caused by a logic error. This flaw can be exploited locally to escalate privileges. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the available data. KEVEPSS 0.7%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-04-11
Critical	9.8	KEVEPSS 30%	CVE-2021-27852Checkbox Survey · Checkbox Survey Deserialization of Untrusted Data Vulnerability Critical9.8KEVEPSS 30%2022-04-11CISA KEVCVE-2021-27852 CVE-2021-27852 is a deserialization of untrusted data vulnerability in Checkbox Survey's CheckboxWeb.dll component. This flaw allows an unauthenticated remote attacker to execute arbitrary code on affected systems. The vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information are provided in the available data. KEVEPSS 30%Vulnerability Checkbox #exploited-in-the-wild	CISA KEV	2022-04-11
Medium	6.6	KEVEPSS 6.6%	CVE-2021-22600Kernel · Linux Kernel Privilege Escalation Vulnerability Medium6.6KEVEPSS 6.6%2022-04-11CISA KEVCVE-2021-22600 CVE-2021-22600 is a vulnerability in the Linux Kernel's packet socket (AF_PACKET) implementation that can cause incorrect memory freeing. This flaw allows a local user to potentially cause a denial-of-service (DoS) or escalate privileges on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 6.6%Vulnerability Linux #exploited-in-the-wild	CISA KEV	2022-04-11
Critical	9.8	KEVEPSS 33%	CVE-2020-2509QNAP Network-Attached Storage (NAS) · QNAP Network-Attached Storage (NAS) Command Injection Vulnerability Critical9.8KEVEPSS 33%2022-04-11CISA KEVCVE-2020-2509 QNAP Network-Attached Storage (NAS) devices have a command injection vulnerability (CVE-2020-2509) that allows remote attackers to execute arbitrary commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 33%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-04-11
Critical	9.8	KEVEPSS 84%	CVE-2017-11317User Interface (UI) for ASP.NET AJAX · Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Critical9.8KEVEPSS 84%2022-04-11CISA KEVCVE-2017-11317 CVE-2017-11317 is a vulnerability in Progress Telerik UI for ASP.NET AJAX that allows remote attackers to upload arbitrary files or execute arbitrary code on the affected system. This vulnerability has been exploited in the wild. The affected product is not a cloud service, and no specific affected versions are provided in the available data. KEVEPSS 84%Vulnerability Telerik #exploited-in-the-wild	CISA KEV	2022-04-11
High	7.8	KEVEPSS 99%	CVE-2021-3156Sudo · Sudo Heap-Based Buffer Overflow Vulnerability High7.8KEVEPSS 99%2022-04-06CISA KEVCVE-2021-3156 CVE-2021-3156 is a heap-based buffer overflow vulnerability in Sudo caused by an off-by-one error. This flaw allows an attacker to escalate privileges on affected systems. It has been exploited in the wild, indicating active threat usage. The vulnerability is rated as high severity due to its potential impact on system security. KEVEPSS 99%Vulnerability #exploited-in-the-wild	CISA KEV	2022-04-06
Critical	9.8	KEVEPSS 99%	CVE-2021-31166HTTP Protocol Stack · Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-04-06CISA KEVCVE-2021-31166 CVE-2021-31166 is a remote code execution vulnerability in the Microsoft HTTP Protocol Stack (http.sys). This flaw allows attackers to execute arbitrary code remotely by exploiting the vulnerable http.sys component. The vulnerability has been exploited in the wild, indicating active attacks leveraging this issue. No specific affected versions are stated in the provided data. The severity is assessed as high due to the potential for remote code execution and active exploitation. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-06

Showing 541–560 of 1,164 results