CWP Control Web Panel has a critical OS command injection vulnerability allowing unauthenticated remote code execution via shell metacharacters in the t_total parameter of a filemanager changePerm request. Exploitation requires knowledge of a valid non-root username. The vulnerability is actively exploited in the wild and has a CVSS score of 9.0.
An unspecified vulnerability in the JavaScriptCore component affects multiple Apple products including macOS, iOS, tvOS, Safari, and watchOS. This flaw may allow arbitrary code execution when processing web content. The affected products could include versions that are end-of-life or end-of-service, and users are advised to discontinue use of impacted products. Exploitation of this vulnerability has been observed in the wild.
SKYSEA Client View suffers from an improper authentication vulnerability that enables remote code execution through a flaw in how authentication is processed on the TCP connection with the management console. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information are provided.
CVE-2021-43798 is a path traversal vulnerability in Grafana that allows unauthorized access to local files. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2010-3765 is a critical heap buffer overflow vulnerability affecting multiple Mozilla products including Firefox, SeaMonkey, and Thunderbird. The flaw involves memory corruption triggered by JavaScript operations related to nsCSSFrameConstructor::ContentAppended, appendChild method, and frame creation. It allows remote attackers to execute arbitrary code when JavaScript is enabled. The vulnerability was actively exploited in the wild and was fixed in Firefox 3.5.15, 3.6.12, SeaMonkey 2.0.10, and Thunderbird 3.0.10 and 3.1.6.
Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow remote code execution. The affected product may be end-of-life or end-of-service, and users are advised to discontinue its use. Exploits for this vulnerability have been observed in the wild.
CVE-2021-22555 is a heap out-of-bounds write vulnerability in the Linux Kernel that can be exploited by an attacker to gain elevated privileges or cause a denial of service through heap memory corruption. The vulnerability arises from improper handling of user namespace operations. It has been observed to be exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2013-3918 is an out-of-bounds write vulnerability in the Microsoft Windows InformationCardSigninHelper Class ActiveX control (icardie.dll). An attacker can exploit this by crafting a malicious webpage that, when viewed by a user, may allow remote code execution with the same privileges as the current user. The affected Windows product may be end-of-life or end-of-service, and users are advised to discontinue its use.
CVE-2021-43226 is a privilege escalation vulnerability in the Microsoft Windows Common Log File System Driver. It allows a local attacker with some privileges to bypass certain security mechanisms, potentially leading to elevated privileges. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2011-3402 is a high-severity remote code execution vulnerability in the Microsoft Windows kernel, specifically in the TrueType font parsing engine within win32k.sys. This flaw allows remote attackers to execute arbitrary code by delivering crafted font data embedded in Word documents or web pages. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Smartbedded Meteobridge contains a command injection vulnerability (CVE-2025-4008) that allows remote unauthenticated attackers to execute arbitrary commands with root privileges. The vulnerability has a high severity score of 8.7 and is known to be exploited in the wild. No affected versions or patch information are currently provided.
Jenkins contains a remote code execution vulnerability identified as CVE-2017-1000353. The flaw allows attackers to send a serialized Java SignedObject to the Jenkins CLI remoting interface, which is then deserialized using a new ObjectInputStream. This process bypasses the existing blocklist-based protection, enabling remote code execution. The vulnerability has been exploited in the wild.
Juniper ScreenOS has an improper authentication vulnerability (CVE-2015-7755) that allows unauthorized remote administrative access to affected devices. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
GNU Bash contains an OS command injection vulnerability (CVE-2014-6278) that allows remote attackers to execute arbitrary commands via a crafted environment. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
Adminer contains a server-side request forgery (SSRF) vulnerability that allows a remote attacker to obtain potentially sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2025-10585 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript and WebAssembly engine. This flaw allows an attacker to cause type confusion, potentially leading to high impact on confidentiality, integrity, and availability. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
The TP-Link TL-WA855RE device has a vulnerability where critical functions lack authentication. An unauthenticated attacker on the same network can send a TDDP_RESET POST request to trigger a factory reset and reboot the device. This allows the attacker to bypass access controls by setting a new administrative password. The affected product may be end-of-life or end-of-service, and users are advised to discontinue its use.
CVE-2024-8069 is a vulnerability in Citrix Session Recording involving deserialization of untrusted data. It allows limited remote code execution with the privileges of the NetworkService account. Exploitation requires the attacker to be an authenticated user on the same intranet as the session recording server. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
Microsoft Internet Explorer has a memory corruption vulnerability (CVE-2013-3893) that enables remote code execution. The affected versions may be end-of-life or end-of-service, and users are advised to discontinue use. This vulnerability has been exploited in the wild.
Microsoft Office Excel contains a remote code execution vulnerability identified as CVE-2007-0671. This vulnerability can be exploited by opening a specially crafted Excel file, which may be delivered via email attachment or hosted on a malicious website. Successful exploitation allows an attacker to execute arbitrary code on the affected system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.