CVE-2017-0148 is a remote code execution vulnerability in the Microsoft SMBv1 server that allows remote attackers to execute arbitrary code by sending specially crafted packets. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2022-22965 is a high-severity remote code execution vulnerability affecting Spring Framework applications running on JDK 9 or later. It arises from unsafe data binding in Spring MVC or Spring WebFlux, allowing attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild.
CVE-2022-22675 is an out-of-bounds write vulnerability in Apple macOS Monterey that could allow an application to execute arbitrary code with kernel privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2022-22674 is an out-of-bounds read vulnerability in Apple macOS Monterey that could allow an application to read kernel memory. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-45382 is a remote code execution vulnerability affecting multiple D-Link router models across all hardware revisions. The flaw exists in the DDNS function within the ncc2 binary file. This vulnerability has been exploited in the wild, posing a high risk to affected devices.
CVE-2022-26871 is an arbitrary file upload vulnerability in Trend Micro Apex Central that could allow remote code execution. It has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2022-1040 is an authentication bypass vulnerability in the User Portal and Webadmin interfaces of Sophos Firewall. This flaw allows remote attackers to bypass authentication controls, potentially leading to remote code execution. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the available data.
CVE-2021-34484 is a high-severity privilege escalation vulnerability in the Microsoft Windows User Profile Service. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
QNAP NAS devices running HBS 3 have an improper authorization vulnerability (CVE-2021-28799) that allows remote attackers to log in without proper credentials. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. The issue relates to insufficient access control, enabling unauthorized access to the device.
The Dell dbutil driver contains an insufficient access control vulnerability that can allow an attacker to escalate privileges, cause denial-of-service (DoS), or disclose sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Dasan GPON Routers have an authentication bypass vulnerability (CVE-2018-10562) that, when combined with CVE-2018-10561, enables remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The routers are affected by command injection issues related to improper input validation.
Dasan GPON Routers have an authentication bypass vulnerability (CVE-2018-10561). This flaw allows attackers to bypass authentication controls. When combined with CVE-2018-10562, it can enable remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2022-1096 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera. Exploitation in the wild has been observed. No specific affected versions or patch information is provided in the input data.
CVE-2022-0543 is a high-severity vulnerability affecting Debian-specific Redis Server installations. It involves a Lua sandbox escape that could allow an attacker to execute remote code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-38646 is a high-severity remote code execution vulnerability in the Microsoft Office Access Connectivity Engine. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2021-34486 is a high-severity privilege escalation vulnerability in Microsoft Windows Event Tracing. The vulnerability is unspecified in detail but has been exploited in the wild. It allows an attacker to elevate privileges on affected Windows systems. No specific affected versions or patch information is provided in the available data.
CVE-2021-26085 is a high-severity vulnerability in Atlassian Confluence Server that allows remote attackers to read arbitrary files without authentication via the /s/ endpoint. This pre-authorization arbitrary file read flaw enables attackers to access restricted resources. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2021-20028 is a high-severity SQL injection vulnerability in SonicWall Secure Remote Access (SRA) products. It arises from improper neutralization of SQL commands, allowing attackers to inject malicious SQL code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2019-7483 is a high-severity unauthenticated directory traversal vulnerability in SonicWall SMA100 devices. It exists in the handleWAFRedirect CGI, allowing attackers to test for the presence of files on the server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2018-8405 is a high-severity elevation of privilege vulnerability in the Microsoft DirectX Graphics Kernel (DXGKRNL) driver. The flaw arises from improper handling of objects in memory by the driver, allowing attackers to escalate privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.