Threats tagged 'exploited-in-the-wild'

CVE-2019-16928 is an out-of-bounds write vulnerability in the Exim Internet Mailer that can lead to remote code execution. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

CVE-2019-1652 is a high-severity vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers. It allows an authenticated remote attacker with administrative privileges to execute arbitrary commands on the affected device. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2019-1297 is a high-severity remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. This flaw allows attackers to execute arbitrary code remotely. The vulnerability has been exploited in the wild, indicating active threat use. No specific affected versions are provided in the available data. No patch or remediation details are included in the input.

CVE-2018-8581 is a privilege escalation vulnerability in Microsoft Exchange Server that allows an attacker to impersonate any other user on the server. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

CVE-2018-8298 is a type confusion vulnerability in the ChakraCore scripting engine that can lead to remote code execution. This vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.

CVE-2018-0180 is a vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software that allows an unauthenticated remote attacker to cause a denial of service by triggering a system reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0179 is a high-severity vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software. It allows an unauthenticated remote attacker to cause the affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0175 is a format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem affecting Cisco IOS, IOS XE, and IOS XR software. This vulnerability allows an unauthenticated, adjacent attacker to cause a denial of service (DoS) or execute arbitrary code with elevated privileges on affected devices. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the input data.

CVE-2018-0174 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0173 is a vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the function that restores encapsulated option 82 information in DHCPv4 packets. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0172 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0167 is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS, IOS XE, and IOS XR software. An unauthenticated attacker adjacent to the vulnerable device could exploit this flaw to cause a denial of service or execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0161 is a vulnerability in the SNMP subsystem of Cisco IOS Software on certain Cisco Catalyst Switch models. It allows an authenticated remote attacker to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0159 is a denial-of-service vulnerability in the Internet Key Exchange Version 1 (IKEv1) implementation of Cisco IOS and IOS XE Software. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, disrupting network operations. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0158 is a high-severity vulnerability in Cisco IOS and IOS XE Software affecting the Internet Key Exchange Version 1 (IKEv1) implementation. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0156 is a vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software that allows an unauthenticated remote attacker to cause a device reload, resulting in a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0155 is a denial-of-service vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series and 4500-X Series Switches. An unauthenticated remote attacker can exploit this flaw to crash the iosd process, causing a DoS condition. This vulnerability has been exploited in the wild.

CVE-2018-0154 is a high-severity vulnerability in the crypto engine of Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software. It allows an unauthenticated remote attacker to cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0151 is a high-severity vulnerability in the Quality of Service (QoS) subsystem of Cisco IOS and IOS XE Software. It allows an unauthenticated remote attacker to cause denial of service or execute arbitrary code with elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-8540 is a high-severity vulnerability in the Microsoft Malware Protection Engine used by various Microsoft security products on multiple Windows versions and Microsoft Exchange Server. The flaw involves improper scanning of specially crafted files, which can cause memory corruption and potentially allow remote code execution. This vulnerability has been exploited in the wild.