Threats tagged 'cisa-kev'

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

CVE-2020-14644 is a deserialization vulnerability in Oracle WebLogic Server that allows unauthenticated remote attackers with network access via T3 or IIOP protocols to execute arbitrary code. This vulnerability has been exploited in the wild. Oracle has released patches as part of its July 2020 Critical Patch Update and strongly recommends applying these patches promptly to mitigate the risk.

CVE-2022-21445 is a high-severity vulnerability in the Oracle ADF Faces library included with Oracle JDeveloper Distribution. It involves deserialization of untrusted data, which can lead to unauthenticated remote code execution. The vulnerability has been exploited in the wild. Oracle has released patches for this and other vulnerabilities in its April 2022 Critical Patch Update. Customers are strongly advised to apply these patches promptly to mitigate the risk.

CVE-2020-0618 is a deserialization vulnerability in Microsoft SQL Server Reporting Services that allows an authenticated attacker to execute code with the privileges of the Report Server service account. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It affects SQL Server Reporting Services and requires authentication to exploit.

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

Adobe Flash Player has a vulnerability in its ExternalInterface ActionScript functionality that allows remote attackers to execute arbitrary code by delivering crafted SWF content. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2014-0497 is an integer underflow vulnerability in Adobe Flash Player that enables remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.

CVE-2014-0502 is a double free vulnerability in Adobe Flash Player that enables remote attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2013-0643 is a vulnerability in Adobe Flash Player involving incorrect default permissions in the Firefox sandbox. This flaw allows remote attackers to execute arbitrary code by delivering specially crafted SWF content. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

Windows Installer Elevation of Privilege Vulnerability

CVE-2017-1000253 is a high-severity vulnerability in the Linux kernel involving a position-independent executable (PIE) stack buffer corruption in the load_elf_binary() function. This flaw allows a local attacker to escalate privileges on the affected system. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.

ImageMagick contains an improper input validation vulnerability affecting multiple coders (EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT). This flaw allows remote attackers to execute arbitrary code via shell metacharacters in crafted images. The vulnerability is known to be exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the input data.

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).