Threats Tagged 'exploited-in-the-wild'

1,164 threats

Threats Tagged 'exploited-in-the-wild'
Severity	CVSS	Signals	Threat	Source	Published
High	7.8	KEVEPSS 31%	CVE-2011-2005Ancillary Function Driver (afd.sys) · Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability High7.8KEVEPSS 31%2022-03-28CISA KEVCVE-2011-2005 CVE-2011-2005 is a vulnerability in the Microsoft Ancillary Function Driver (afd.sys) where improper validation of user-mode input passed to kernel mode allows local users to gain elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 31%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-28
High	7.8	KEVEPSS 8.7%	CVE-2010-4398Windows · Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability High7.8KEVEPSS 8.7%2022-03-28CISA KEVCVE-2010-4398 CVE-2010-4398 is a stack-based buffer overflow vulnerability in the RtlQueryRegistryValues function within the win32k.sys component of Microsoft Windows. This flaw allows local users to escalate privileges and bypass the User Account Control (UAC) feature. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected Windows versions or patch information is provided in the input data. KEVEPSS 8.7%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-28
Critical	9.1	KEVEPSS 63%	CVE-2015-4068Unified Data Protection (UDP) · Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability Critical9.1KEVEPSS 63%2022-03-25CISA KEVCVE-2015-4068 CVE-2015-4068 is a directory traversal vulnerability in Arcserve Unified Data Protection (UDP) that allows remote attackers to access sensitive information or cause a denial of service. It has been exploited in the wild. No specific affected versions or patch information are provided. KEVEPSS 63%Vulnerability Arcserve #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.5	KEVEPSS 83%	CVE-2015-3035Multiple Archer Devices · TP-Link Multiple Archer Devices Directory Traversal Vulnerability High7.5KEVEPSS 83%2022-03-25CISA KEVCVE-2015-3035 A directory traversal vulnerability exists in multiple TP-Link Archer devices that allows remote attackers to read arbitrary files by using '..' sequences in the PATH_INFO to the login/ endpoint. This vulnerability has been exploited in the wild and is considered high severity. KEVEPSS 83%Vulnerability TP-Link #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 99%	CVE-2015-1427Elasticsearch · Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-03-25CISA KEVCVE-2015-1427 CVE-2015-1427 is a high-severity vulnerability in Elasticsearch's Groovy scripting engine that allows remote attackers to bypass sandbox protections and execute arbitrary shell commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Elastic #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 82%	CVE-2015-1187Multiple Devices · D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability Critical9.8KEVEPSS 82%2022-03-25CISA KEVCVE-2015-1187 Multiple D-Link and TRENDnet devices contain a vulnerability in their ping tool that allows remote attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patches are detailed in the provided information. KEVEPSS 82%Vulnerability D-Link and TRENDnet #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.5	KEVEPSS 40%	CVE-2015-0666Prime Data Center Network Manager (DCNM) · Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability High7.5KEVEPSS 40%2022-03-25CISA KEVCVE-2015-0666 CVE-2015-0666 is a directory traversal vulnerability in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 40%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-03-25
High	8.8	KEVEPSS 94%	CVE-2014-6332Windows · Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability High8.8KEVEPSS 94%2022-03-25CISA KEVCVE-2014-6332 CVE-2014-6332 is a high-severity remote code execution vulnerability in the OleAut32.dll component of Microsoft Windows OLE Automation. It allows remote attackers to execute arbitrary code by crafting a malicious website that exploits the vulnerability. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 94%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-25
High	8.8	KEVEPSS 87%	CVE-2014-6324Kerberos Key Distribution Center (KDC) · Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability High8.8KEVEPSS 87%2022-03-25CISA KEVCVE-2014-6324 CVE-2014-6324 is a vulnerability in the Microsoft Kerberos Key Distribution Center (KDC) that allows remote authenticated domain users to escalate their privileges to domain administrator level. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data. KEVEPSS 87%Vulnerability Microsoft #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 99%	CVE-2014-6287HTTP File Server (HFS) · Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability Critical9.8KEVEPSS 99%2022-03-25CISA KEVCVE-2014-6287 CVE-2014-6287 is a remote code execution vulnerability in Rejetto HTTP File Server (HFS) caused by the findMacroMarker function in parserLib.pas. This flaw allows remote attackers to execute arbitrary programs on the affected server. The vulnerability is known to be exploited in the wild. No specific affected versions or patch information is provided. KEVEPSS 99%Vulnerability Rejetto #exploited-in-the-wild	CISA KEV	2022-03-25
High	8.1	KEVEPSS 88%	CVE-2014-3120Elasticsearch · Elasticsearch Remote Code Execution Vulnerability High8.1KEVEPSS 88%2022-03-25CISA KEVCVE-2014-3120 CVE-2014-3120 is a high-severity vulnerability in Elasticsearch that allows remote attackers to execute arbitrary MVEL expressions and Java code due to dynamic scripting being enabled. This remote code execution flaw has been exploited in the wild. No specific affected versions or patch information are provided in the input data. KEVEPSS 88%Vulnerability Elastic #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.5	KEVEPSS 53%	CVE-2014-0130Ruby on Rails · Ruby on Rails Directory Traversal Vulnerability High7.5KEVEPSS 53%2022-03-25CISA KEVCVE-2014-0130 CVE-2014-0130 is a directory traversal vulnerability in Ruby on Rails affecting the implicit-render implementation in actionpack/lib/abstract_controller/base.rb. This flaw allows remote attackers to read arbitrary files on the affected system via crafted requests. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data. KEVEPSS 53%Vulnerability Rails #exploited-in-the-wild	CISA KEV	2022-03-25
Medium	5.4	KEVEPSS 50%	CVE-2013-5223DSL-2760U · D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability Medium5.4KEVEPSS 50%2022-03-25CISA KEVCVE-2013-5223 CVE-2013-5223 is a cross-site scripting (XSS) vulnerability in the D-Link DSL-2760U gateway that allows remote authenticated users to inject arbitrary web script or HTML. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data. KEVEPSS 50%Vulnerability D-Link #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 79%	CVE-2013-4810ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management · HP Multiple Products Remote Code Execution Vulnerability Critical9.8KEVEPSS 79%2022-03-25CISA KEVCVE-2013-4810 CVE-2013-4810 is a remote code execution vulnerability affecting multiple HP products including ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management. The flaw allows remote attackers to execute arbitrary code by sending a specially crafted marshalled object to either the EJBInvokerServlet or JMXInvokerServlet. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 79%Vulnerability Hewlett Packard (HP)#exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 99%	CVE-2013-2251Struts · Apache Struts Improper Input Validation Vulnerability Critical9.8KEVEPSS 99%2022-03-25CISA KEVCVE-2013-2251 CVE-2013-2251 is a high-severity vulnerability in Apache Struts that allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions due to improper input validation. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data. KEVEPSS 99%Vulnerability Apache #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 99%	CVE-2012-1823PHP · PHP-CGI Query String Parameter Vulnerability Critical9.8KEVEPSS 99%2022-03-25CISA KEVCVE-2012-1823 CVE-2012-1823 is a vulnerability in PHP when configured as a CGI script. It involves improper handling of query strings in the sapi/cgi/cgi_main.c component, enabling remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild and is considered high severity. KEVEPSS 99%Vulnerability #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.8	KEVEPSS 17%	CVE-2010-4345Exim · Exim Privilege Escalation Vulnerability High7.8KEVEPSS 17%2022-03-25CISA KEVCVE-2010-4345 CVE-2010-4345 is a privilege escalation vulnerability in Exim that allows local users to gain elevated privileges by exploiting the ability of the exim user account to specify an alternate configuration file containing directives with arbitrary commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 17%Vulnerability #exploited-in-the-wild	CISA KEV	2022-03-25
Critical	9.8	KEVEPSS 71%	CVE-2010-4344Exim · Exim Heap-Based Buffer Overflow Vulnerability Critical9.8KEVEPSS 71%2022-03-25CISA KEVCVE-2010-4344 CVE-2010-4344 is a heap-based buffer overflow vulnerability in the string_vformat function of Exim mail transfer agent versions before 4.70. This flaw allows remote attackers to execute arbitrary code during an SMTP session. The vulnerability has been exploited in the wild, indicating active threat usage. No explicit patch links are provided in the input data, and affected versions are not specifically enumerated beyond 'before 4.70'. KEVEPSS 71%Vulnerability #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.5	KEVEPSS 5.7%	CVE-2010-3035IOS XR · Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability High7.5KEVEPSS 5.7%2022-03-25CISA KEVCVE-2010-3035 CVE-2010-3035 is a denial-of-service vulnerability in Cisco IOS XR when Border Gateway Protocol (BGP) is configured. Remote attackers can exploit this flaw to cause a DoS condition on affected devices. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data. KEVEPSS 5.7%Vulnerability Cisco #exploited-in-the-wild	CISA KEV	2022-03-25
High	7.5	KEVEPSS 99%	CVE-2010-2861ColdFusion · Adobe ColdFusion Directory Traversal Vulnerability High7.5KEVEPSS 99%2022-03-25CISA KEVCVE-2010-2861 Adobe ColdFusion contains a directory traversal vulnerability in its administrator console that allows remote attackers to read arbitrary files on the affected system. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data. KEVEPSS 99%Vulnerability Adobe #exploited-in-the-wild	CISA KEV	2022-03-25

Showing 601–620 of 1,164 results