Multiple D-Link routers have a command injection vulnerability (CVE-2019-16920) that allows attackers to execute arbitrary commands, potentially leading to full system compromise. This vulnerability has been exploited in the wild. No specific affected versions or patches are detailed in the provided data.
CVE-2019-15107 is a command injection vulnerability in Webmin's password_change.cgi script, specifically in the 'old' parameter. This flaw allows attackers to execute arbitrary commands on the affected system. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No explicit affected versions or patch information is provided in the input data.
CVE-2019-12991 is an authenticated command injection vulnerability affecting Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. This vulnerability allows an authenticated attacker to execute arbitrary commands on the affected devices. It has been exploited in the wild, indicating active threat activity. The severity is assessed as high due to the potential impact of command injection on critical network infrastructure.
CVE-2019-12989 is a high-severity SQL Injection vulnerability affecting Citrix SD-WAN and NetScaler SD-WAN products. This vulnerability allows attackers to execute unauthorized SQL commands on the affected systems. It has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.
CVE-2019-11043 is a high severity buffer overflow vulnerability in certain configurations of PHP FastCGI Process Manager (FPM). It allows remote attackers to cause the FPM module to write beyond allocated buffers, potentially leading to remote code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
Kentico Xperience contains a vulnerability due to failure to validate security headers, leading to deserialization of untrusted data. This flaw can allow unauthenticated remote code execution. The vulnerability is known to be exploited in the wild and is classified as high severity.
The Jenkins Matrix Project plugin contains a vulnerability that allows users to escape the sandbox, enabling remote code execution. This vulnerability has been exploited in the wild, posing a high risk to affected Jenkins installations.
CVE-2019-0903 is a remote code execution vulnerability in the Windows Graphics Device Interface (GDI) that allows an attacker to take control of an affected system by exploiting how GDI handles objects in memory. This vulnerability has been exploited in the wild. It is rated as high severity due to the potential for full system compromise.
VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in its local web UI component. Exploiting this vulnerability can lead to remote code execution on the affected device. This vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided.
The LG N1A1 NAS device running version 3718.510 is affected by a remote code execution vulnerability identified as CVE-2018-14839. This vulnerability allows an attacker to execute arbitrary commands remotely on the affected device. It has been confirmed to be exploited in the wild. No specific patch or remediation information is provided in the available data.
CVE-2018-1273 is a high-severity vulnerability in VMware Tanzu Spring Data Commons involving a property binder flaw that allows remote code execution. It has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2018-11138 is a remote command execution vulnerability in the Quest KACE System Management Appliance. The vulnerability arises because the '/common/download_agent_installer.php' script is accessible to anonymous users, allowing attackers to execute arbitrary commands remotely. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2018-0147 is a high-severity vulnerability in Cisco Secure Access Control System (ACS) involving insecure Java deserialization. This flaw allows an unauthenticated remote attacker to execute arbitrary commands on affected devices by exploiting unsafe deserialization of user-supplied data. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-0125 is a high-severity vulnerability in the web interface of Cisco VPN Routers that allows an unauthenticated remote attacker to execute arbitrary code with root privileges, potentially gaining full control of the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-6334 is a high severity OS command injection vulnerability affecting NETGEAR DGN2200 devices with firmware versions up to 10.0.0.50. The vulnerability exists in the dnslookup.cgi component and allows remote authenticated users to execute arbitrary operating system commands. This vulnerability has been exploited in the wild. No specific patch or remediation information is provided in the available data.
CVE-2017-6316 is a high-severity remote code execution vulnerability affecting the management interfaces of Citrix NetScaler SD-WAN Enterprise and Standard Edition, Citrix CloudBridge Virtual WAN Edition, and XenMobile Server. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. This vulnerability has been exploited in the wild. No explicit patch or remediation information is provided in the input data.
CVE-2017-3881 is a high-severity vulnerability in Cisco IOS and IOS XE software affecting the Cisco Cluster Management Protocol (CMP) processing code. It allows an unauthenticated remote attacker to cause a device reload or execute code with elevated privileges. This vulnerability has been exploited in the wild.
CVE-2017-12617 is a high severity remote code execution vulnerability in Apache Tomcat. It allows an attacker to upload a JSP file via a specially crafted request, which can then be executed on the server. This vulnerability has been exploited in the wild.
CVE-2017-12615 is a remote code execution vulnerability in Apache Tomcat running on Windows when HTTP PUT requests are enabled. An attacker can upload a JSP file via a crafted request, which can then be executed on the server, allowing arbitrary code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2017-0146 is a high-severity remote code execution vulnerability in the SMBv1 server component of Microsoft Windows. It allows remote attackers to execute arbitrary code on affected systems. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.