Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	KEVEPSS 99%	CVE-2017-0148SMBv1 server · Microsoft SMBv1 Server Remote Code Execution Vulnerability High8.1KEVEPSS 99%2022-04-06CISA KEVCVE-2017-0148 CVE-2017-0148 is a remote code execution vulnerability in the Microsoft SMBv1 server that allows remote attackers to execute arbitrary code by sending specially crafted packets. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. KEVEPSS 99%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-04-06
Critical	9.8	KEVEPSS 99%	CVE-2022-22965Spring Framework · Spring Framework JDK 9+ Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-04-04CISA KEVCVE-2022-22965 CVE-2022-22965 is a high-severity remote code execution vulnerability affecting Spring Framework applications running on JDK 9 or later. It arises from unsafe data binding in Spring MVC or Spring WebFlux, allowing attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild. KEVEPSS 99%Vulnerability VMware #exploited-in-the-wild	CISA KEV	2022-04-04
High	7.8	KEVEPSS 12%	CVE-2022-22675macOS · Apple macOS Out-of-Bounds Write Vulnerability High7.8KEVEPSS 12%2022-04-04CISA KEVCVE-2022-22675 CVE-2022-22675 is an out-of-bounds write vulnerability in Apple macOS Monterey that could allow an application to execute arbitrary code with kernel privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 12%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-04-04
Medium	5.5	KEVEPSS 1.1%	CVE-2022-22674macOS · Apple macOS Out-of-Bounds Read Vulnerability Medium5.5KEVEPSS 1.1%2022-04-04CISA KEVCVE-2022-22674 CVE-2022-22674 is an out-of-bounds read vulnerability in Apple macOS Monterey that could allow an application to read kernel memory. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 1.1%Vulnerability Apple #exploited-in-the-wild	CISA KEV	2022-04-04
Critical	9.8	KEVEPSS 97%	CVE-2021-45382Multiple Routers · D-Link Multiple Routers Remote Code Execution Vulnerability Critical9.8KEVEPSS 97%2022-04-04CISA KEVCVE-2021-45382 CVE-2021-45382 is a remote code execution vulnerability affecting multiple D-Link router models across all hardware revisions. The flaw exists in the DDNS function within the ncc2 binary file. This vulnerability has been exploited in the wild, posing a high risk to affected devices. KEVEPSS 97%Vulnerability D-Link #exploited-in-the-wild	CISA KEV	2022-04-04
Critical	9.8	KEVEPSS 19%	CVE-2022-26871Apex Central · Trend Micro Apex Central Arbitrary File Upload Vulnerability Critical9.8KEVEPSS 19%2022-03-31CISA KEVCVE-2022-26871 CVE-2022-26871 is an arbitrary file upload vulnerability in Trend Micro Apex Central that could allow remote code execution. It has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 19%Vulnerability Trend Micro #exploited-in-the-wild	CISA KEV	2022-03-31
Critical	9.8	KEVEPSS 99%	CVE-2022-1040Firewall · Sophos Firewall Authentication Bypass Vulnerability Critical9.8KEVEPSS 99%2022-03-31CISA KEVCVE-2022-1040 CVE-2022-1040 is an authentication bypass vulnerability in the User Portal and Webadmin interfaces of Sophos Firewall. This flaw allows remote attackers to bypass authentication controls, potentially leading to remote code execution. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information are provided in the available data. KEVEPSS 99%Vulnerability Sophos #exploited-in-the-wild	CISA KEV	2022-03-31
High	7.8	KEVEPSS 21%	CVE-2021-34484Windows · Microsoft Windows User Profile Service Privilege Escalation Vulnerability High7.8KEVEPSS 21%2022-03-31CISA KEVCVE-2021-34484 CVE-2021-34484 is a high-severity privilege escalation vulnerability in the Microsoft Windows User Profile Service. It allows an attacker to gain elevated privileges on affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 21%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-31
Critical	10.0	KEVEPSS 78%	CVE-2021-28799Network Attached Storage (NAS) · QNAP NAS Improper Authorization Vulnerability Critical10.0KEVEPSS 78%2022-03-31CISA KEVCVE-2021-28799 QNAP NAS devices running HBS 3 have an improper authorization vulnerability (CVE-2021-28799) that allows remote attackers to log in without proper credentials. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. The issue relates to insufficient access control, enabling unauthorized access to the device. KEVEPSS 78%Vulnerability QNAP #exploited-in-the-wild	CISA KEV	2022-03-31
High	8.8	KEVEPSS 80%	CVE-2021-21551dbutil Driver · Dell dbutil Driver Insufficient Access Control Vulnerability High8.8KEVEPSS 80%2022-03-31CISA KEVCVE-2021-21551 The Dell dbutil driver contains an insufficient access control vulnerability that can allow an attacker to escalate privileges, cause denial-of-service (DoS), or disclose sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 80%Vulnerability Dell #exploited-in-the-wild	CISA KEV	2022-03-31
Critical	9.8	KEVEPSS 99%	CVE-2018-10562Gigabit Passive Optical Network (GPON) Routers · Dasan GPON Routers Command Injection Vulnerability Critical9.8KEVEPSS 99%2022-03-31CISA KEVCVE-2018-10562 Dasan GPON Routers have an authentication bypass vulnerability (CVE-2018-10562) that, when combined with CVE-2018-10561, enables remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The routers are affected by command injection issues related to improper input validation. KEVEPSS 99%Vulnerability Dasan #exploited-in-the-wild	CISA KEV	2022-03-31
Critical	9.8	KEVEPSS 92%	CVE-2018-10561Gigabit Passive Optical Network (GPON) Routers · Dasan GPON Routers Authentication Bypass Vulnerability Critical9.8KEVEPSS 92%2022-03-31CISA KEVCVE-2018-10561 Dasan GPON Routers have an authentication bypass vulnerability (CVE-2018-10561). This flaw allows attackers to bypass authentication controls. When combined with CVE-2018-10562, it can enable remote code execution. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 92%Vulnerability Dasan #exploited-in-the-wild	CISA KEV	2022-03-31
High	8.8	KEVEPSS 24%	CVE-2022-1096Chromium V8 · Google Chromium V8 Type Confusion Vulnerability High8.8KEVEPSS 24%2022-03-28CISA KEVCVE-2022-1096 CVE-2022-1096 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera. Exploitation in the wild has been observed. No specific affected versions or patch information is provided in the input data. KEVEPSS 24%Vulnerability Google #exploited-in-the-wild	CISA KEV	2022-03-28
Critical	10.0	KEVEPSS 99%	CVE-2022-0543Debian-specific Redis Servers · Debian-specific Redis Server Lua Sandbox Escape Vulnerability Critical10.0KEVEPSS 99%2022-03-28CISA KEVCVE-2022-0543 CVE-2022-0543 is a high-severity vulnerability affecting Debian-specific Redis Server installations. It involves a Lua sandbox escape that could allow an attacker to execute remote code on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Redis #exploited-in-the-wild	CISA KEV	2022-03-28
High	7.8	KEVEPSS 8.0%	CVE-2021-38646Office · Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability High7.8KEVEPSS 8.0%2022-03-28CISA KEVCVE-2021-38646 CVE-2021-38646 is a high-severity remote code execution vulnerability in the Microsoft Office Access Connectivity Engine. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 8.0%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-28
High	7.8	KEVEPSS 9.3%	CVE-2021-34486Windows · Microsoft Windows Event Tracing Privilege Escalation Vulnerability High7.8KEVEPSS 9.3%2022-03-28CISA KEVCVE-2021-34486 CVE-2021-34486 is a high-severity privilege escalation vulnerability in Microsoft Windows Event Tracing. The vulnerability is unspecified in detail but has been exploited in the wild. It allows an attacker to elevate privileges on affected Windows systems. No specific affected versions or patch information is provided in the available data. KEVEPSS 9.3%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-28
Medium	5.3	KEVEPSS 99%	CVE-2021-26085Confluence Server · Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability Medium5.3KEVEPSS 99%2022-03-28CISA KEVCVE-2021-26085 CVE-2021-26085 is a high-severity vulnerability in Atlassian Confluence Server that allows remote attackers to read arbitrary files without authentication via the /s/ endpoint. This pre-authorization arbitrary file read flaw enables attackers to access restricted resources. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. KEVEPSS 99%Vulnerability Atlassian #exploited-in-the-wild	CISA KEV	2022-03-28
Critical	9.8	KEVEPSS 30%	CVE-2021-20028Secure Remote Access (SRA) · SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability Critical9.8KEVEPSS 30%2022-03-28CISA KEVCVE-2021-20028 CVE-2021-20028 is a high-severity SQL injection vulnerability in SonicWall Secure Remote Access (SRA) products. It arises from improper neutralization of SQL commands, allowing attackers to inject malicious SQL code. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. KEVEPSS 30%Vulnerability SonicWall #exploited-in-the-wild	CISA KEV	2022-03-28
High	7.5	KEVEPSS 4.0%	CVE-2019-7483SMA100 · SonicWall SMA100 Directory Traversal Vulnerability High7.5KEVEPSS 4.0%2022-03-28CISA KEVCVE-2019-7483 CVE-2019-7483 is a high-severity unauthenticated directory traversal vulnerability in SonicWall SMA100 devices. It exists in the handleWAFRedirect CGI, allowing attackers to test for the presence of files on the server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 4.0%Vulnerability SonicWall #exploited-in-the-wild	CISA KEV	2022-03-28
High	7.8	KEVEPSS 3.4%	CVE-2018-8405DirectX Graphics Kernel (DXGKRNL) · Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability High7.8KEVEPSS 3.4%2022-03-28CISA KEVCVE-2018-8405 CVE-2018-8405 is a high-severity elevation of privilege vulnerability in the Microsoft DirectX Graphics Kernel (DXGKRNL) driver. The flaw arises from improper handling of objects in memory by the driver, allowing attackers to escalate privileges. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 3.4%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-28

Showing 561–580 of 1,164 results