Threats Tagged 'exploited-in-the-wild'

CVE-2009-2055 is a high-severity vulnerability in Cisco IOS XR when Border Gateway Protocol (BGP) is configured. It allows remote attackers to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

A vulnerability in phpMyAdmin's setup script allows an attacker to use a crafted POST request to inject arbitrary PHP code into the generated configuration file. This can lead to remote code execution on the affected system. The vulnerability has been exploited in the wild and is considered high severity.

CVE-2009-0927 is a stack-based buffer overflow vulnerability in Adobe Reader and Adobe Acrobat that allows remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2005-2773 is a remote code execution vulnerability in HP OpenView Network Node Manager that allows a remote attacker to execute arbitrary commands on the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2022-26318 is a high-severity vulnerability affecting WatchGuard Firebox and XTM appliances that allows an unauthenticated user to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2022-26143 is a high-severity vulnerability affecting Mitel's MiCollab and MiVoice Business Express products. It allows a malicious actor to gain unauthorized access to sensitive information and services, and may cause performance degradation or denial of service on the affected systems. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

CVE-2022-21999 is a high-severity privilege escalation vulnerability in the Microsoft Windows Print Spooler service. The vulnerability is unspecified in detail but is known to be exploited in the wild and has been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2021-42237 is a high-severity vulnerability in Sitecore XP involving insecure deserialization that enables remote code execution. It has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-22941 is an improper access control vulnerability in Citrix ShareFile storage zones controller that allows unauthenticated remote attackers to compromise the controller. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It poses a high risk due to unauthorized access potential.

D-Link DIR-610 devices are vulnerable to remote code execution through the cmd parameter in command.php. This vulnerability allows attackers to execute arbitrary commands remotely on affected devices. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

Multiple Zyxel network-attached storage (NAS) devices have a pre-authentication OS command injection vulnerability (CVE-2020-9054) that allows remote unauthenticated attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

CVE-2020-7247 is a high-severity remote code execution vulnerability in OpenSMTPD's smtp_mailaddr function. It allows remote attackers to execute arbitrary commands as root via a crafted SMTP session. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2020-5410 is a path traversal vulnerability in VMware Tanzu's Spring Cloud Config Server that allows attackers to access arbitrary configuration files. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.

CVE-2020-25223 is a high severity remote code execution vulnerability in the WebAdmin interface of Sophos SG UTM. It has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

QNAP Helpdesk contains an improper access control vulnerability that could allow an attacker to gain elevated privileges or access sensitive information. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided.

CVE-2020-2021 is a high-severity authentication bypass vulnerability in Palo Alto Networks PAN-OS affecting its SAML implementation. This flaw allows attackers to bypass authentication mechanisms, potentially gaining unauthorized access. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

Apache Kylin contains an OS command injection vulnerability (CVE-2020-1956) that allows remote attackers to execute arbitrary operating system commands. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.

CVE-2020-1631 is a path traversal vulnerability in Juniper Junos OS affecting the HTTP/HTTPS service used by multiple features including J-Web and Zero Touch Provisioning. It allows unauthenticated remote attackers to execute code on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2019-6340 is a remote code execution vulnerability in Drupal Core where certain field types fail to properly sanitize data from non-form sources, potentially allowing arbitrary PHP code execution. This vulnerability has been exploited in the wild. It is classified as high severity due to the risk of remote code execution.

CVE-2019-2616 is a high-severity vulnerability in Oracle BI Publisher (formerly XML Publisher) that allows unauthorized actions due to an unspecified flaw. Open-source reporting attributes this issue to an authentication bypass, enabling attackers to gain unauthorized access. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.