CVE-2011-2005 is a vulnerability in the Microsoft Ancillary Function Driver (afd.sys) where improper validation of user-mode input passed to kernel mode allows local users to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2010-4398 is a stack-based buffer overflow vulnerability in the RtlQueryRegistryValues function within the win32k.sys component of Microsoft Windows. This flaw allows local users to escalate privileges and bypass the User Account Control (UAC) feature. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected Windows versions or patch information is provided in the input data.
CVE-2015-4068 is a directory traversal vulnerability in Arcserve Unified Data Protection (UDP) that allows remote attackers to access sensitive information or cause a denial of service. It has been exploited in the wild. No specific affected versions or patch information are provided.
A directory traversal vulnerability exists in multiple TP-Link Archer devices that allows remote attackers to read arbitrary files by using '..' sequences in the PATH_INFO to the login/ endpoint. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2015-1427 is a high-severity vulnerability in Elasticsearch's Groovy scripting engine that allows remote attackers to bypass sandbox protections and execute arbitrary shell commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Multiple D-Link and TRENDnet devices contain a vulnerability in their ping tool that allows remote attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patches are detailed in the provided information.
CVE-2015-0666 is a directory traversal vulnerability in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2014-6332 is a high-severity remote code execution vulnerability in the OleAut32.dll component of Microsoft Windows OLE Automation. It allows remote attackers to execute arbitrary code by crafting a malicious website that exploits the vulnerability. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2014-6324 is a vulnerability in the Microsoft Kerberos Key Distribution Center (KDC) that allows remote authenticated domain users to escalate their privileges to domain administrator level. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2014-6287 is a remote code execution vulnerability in Rejetto HTTP File Server (HFS) caused by the findMacroMarker function in parserLib.pas. This flaw allows remote attackers to execute arbitrary programs on the affected server. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided.
CVE-2014-3120 is a high-severity vulnerability in Elasticsearch that allows remote attackers to execute arbitrary MVEL expressions and Java code due to dynamic scripting being enabled. This remote code execution flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2014-0130 is a directory traversal vulnerability in Ruby on Rails affecting the implicit-render implementation in actionpack/lib/abstract_controller/base.rb. This flaw allows remote attackers to read arbitrary files on the affected system via crafted requests. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2013-5223 is a cross-site scripting (XSS) vulnerability in the D-Link DSL-2760U gateway that allows remote authenticated users to inject arbitrary web script or HTML. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.
CVE-2013-4810 is a remote code execution vulnerability affecting multiple HP products including ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management. The flaw allows remote attackers to execute arbitrary code by sending a specially crafted marshalled object to either the EJBInvokerServlet or JMXInvokerServlet. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2013-2251 is a high-severity vulnerability in Apache Struts that allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions due to improper input validation. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2012-1823 is a vulnerability in PHP when configured as a CGI script. It involves improper handling of query strings in the sapi/cgi/cgi_main.c component, enabling remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2010-4345 is a privilege escalation vulnerability in Exim that allows local users to gain elevated privileges by exploiting the ability of the exim user account to specify an alternate configuration file containing directives with arbitrary commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2010-4344 is a heap-based buffer overflow vulnerability in the string_vformat function of Exim mail transfer agent versions before 4.70. This flaw allows remote attackers to execute arbitrary code during an SMTP session. The vulnerability has been exploited in the wild, indicating active threat usage. No explicit patch links are provided in the input data, and affected versions are not specifically enumerated beyond 'before 4.70'.
CVE-2010-3035 is a denial-of-service vulnerability in Cisco IOS XR when Border Gateway Protocol (BGP) is configured. Remote attackers can exploit this flaw to cause a DoS condition on affected devices. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Adobe ColdFusion contains a directory traversal vulnerability in its administrator console that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.