CVE-2019-1069 is a high-severity privilege escalation vulnerability in Microsoft Task Scheduler. It arises from improper validation of certain file operations by the Task Scheduler Service. This flaw allows an attacker with limited privileges to escalate their privileges on the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Mozilla Firefox has a use-after-free vulnerability in its WebGPU IPC Framework that can be exploited to achieve arbitrary code execution. This vulnerability is known to have been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-26485 is a use-after-free vulnerability in Mozilla Firefox's XSLT parameter processing. This flaw can be exploited to achieve arbitrary code execution. The vulnerability has been observed in the wild, indicating active exploitation. No specific affected versions or patch information is provided in the input data.
VMware vCenter Server and Cloud Foundation contain a Server Side Request Forgery (SSRF) vulnerability due to improper validation of URLs in a vCenter Server plugin. This vulnerability allows attackers to perform SSRF attacks that can lead to information disclosure. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2020-8218 is a code injection vulnerability in Pulse Connect Secure that allows attackers to execute arbitrary code via a crafted URI through the admin web interface. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.
A server-side template injection vulnerability exists in Atlassian Jira Server and Data Center that can enable remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
NETGEAR DGN2200 wireless routers have a remote code execution vulnerability identified as CVE-2017-6077. This flaw allows an attacker to execute arbitrary code remotely on affected devices. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
Multiple NETGEAR routers have a vulnerability that allows unauthenticated web pages to pass form input directly to the command-line interface, enabling remote code execution. This flaw has been confirmed by NETGEAR and is known to be exploited in the wild. The vulnerability is classified as high severity due to the potential for attackers to execute arbitrary commands remotely without authentication.
CVE-2013-0631 is an information disclosure vulnerability in Adobe ColdFusion that could allow attackers to obtain sensitive information from a compromised server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Adobe ColdFusion contains a directory traversal vulnerability that could allow unauthorized users to access restricted directories on affected systems. This vulnerability has been exploited in the wild and is considered high severity.
Adobe ColdFusion contains an authentication bypass vulnerability (CVE-2013-0625) that allows unauthorized users to gain administrative access. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Adobe BlazeDS, a component used in LifeCycle and Coldfusion, has a vulnerability (CVE-2009-3960) that allows information disclosure. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information are provided.
CVE-2022-20708 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2022-20703 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This vulnerability allows attackers to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). It has been exploited in the wild. No explicit patch information is provided in the input data.
CVE-2022-20701 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This flaw could allow an attacker to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-20700 is a stack-based buffer overflow vulnerability affecting Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. This flaw allows attackers to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers contain a stack-based buffer overflow vulnerability that can be exploited to execute arbitrary code, elevate privileges, bypass authentication and authorization, run unsigned software, or cause denial of service. This vulnerability has been exploited in the wild. No explicit patch information is provided in the input data.
CVE-2021-41379 is a high-severity privilege escalation vulnerability in Microsoft Windows Installer. It allows an attacker to elevate privileges on affected Windows systems. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. Specific affected Windows versions are not detailed in the available information.
CVE-2020-1938 is a vulnerability in Apache Tomcat where the Apache JServ Protocol (AJP) connections are treated with higher trust than HTTP connections. This improper privilege management can be exploited if an attacker gains access to AJP connections.
CVE-2020-11899 is a high severity vulnerability in the Treck TCP/IP stack's IPv6 implementation that allows out-of-bounds reads. This flaw can lead to information disclosure or memory corruption. It has been exploited in the wild, indicating active attacks leveraging this vulnerability.