ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker
the ability to execute remote code or directly impact confidential data or critical systems.
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVE-2020-3259 is an information disclosure vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) affecting certain AnyConnect and WebVPN configurations. The flaw allows an attacker to retrieve memory contents due to a buffer tracking issue when parsing invalid URLs via the web services interface. This could lead to exposure of confidential information. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2024-21410 is a critical privilege escalation vulnerability in Microsoft Exchange Server. It allows an unauthenticated attacker to escalate privileges, potentially leading to full compromise of the affected system. The vulnerability has a CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. Exploits are known to be active in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2024-21412 is a high-severity security feature bypass vulnerability in Microsoft Windows Internet Shortcut Files. It allows attackers to bypass security features, potentially leading to high confidentiality and integrity impacts. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.
CVE-2024-21351 is a high-severity vulnerability in Microsoft Windows SmartScreen that allows attackers to bypass the SmartScreen security feature. This bypass can enable code injection leading to potential code execution, which may result in data exposure and reduced system availability. The vulnerability has been exploited in the wild. No specific affected Windows versions or patch information is provided.
CVE-2024-21762 is a critical out-of-bound write vulnerability in Fortinet FortiOS that allows remote unauthenticated attackers to execute arbitrary code or commands via specially crafted HTTP requests. It has a high CVSS score of 9.6 and is known to be exploited in the wild, including use in ransomware campaigns.
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.
The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.
We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVE-2022-48618 is a high-severity memory corruption vulnerability affecting multiple Apple products including iOS, iPadOS, macOS, tvOS, and watchOS. It involves a time-of-check/time-of-use (TOCTOU) flaw that can allow an attacker with read and write capabilities to bypass Pointer Authentication. The vulnerability has been exploited in the wild. No official vendor advisory or patch information is currently available.
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.
CVE-2024-23222 is a high-severity type confusion vulnerability in Apple Safari and WebKit that may allow processing of maliciously crafted web content to lead to arbitrary code execution. The issue was addressed with improved checks and memory handling. This vulnerability is associated with the Coruna exploit and affects multiple Apple platforms including iOS, iPadOS, macOS, tvOS, and visionOS. Apple released official patches in Safari 17.3 and various OS updates starting January 22, 2024, including backports for devices unable to upgrade to the latest OS versions. The CVSS score is 8.8, indicating a high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of publication. The vendor advisory confirms the availability of official fixes across affected platforms.
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of the argument service with the input ../../../../htdocs/webinc/getcfg/DHCPS6.BRIDGE-1.xml leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-251666 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.
Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
CVE-2018-15133 is a high-severity vulnerability in the Laravel Framework involving deserialization of untrusted data. It allows remote command execution but requires that an attacker has access to the application's encryption key (APP_KEY). This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.