CVE-2021-42321 is a high-severity remote code execution vulnerability in Microsoft Exchange Server. It arises from improper validation of cmdlet arguments, allowing an authenticated attacker to execute arbitrary code remotely. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
CVE-2021-42292 is a security feature bypass vulnerability in Microsoft Excel that allows a local user to execute arbitrary code. This vulnerability has been exploited in the wild. It affects Microsoft Office products, but specific affected versions are not detailed in the provided data.
CVE-2021-21017 is a heap-based buffer overflow vulnerability in Adobe Acrobat and Reader that allows an unauthenticated attacker to execute code with the privileges of the current user. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-28550 is a use-after-free vulnerability in Adobe Acrobat and Reader that allows an unauthenticated attacker to execute code with the privileges of the current user. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow an attacker to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Adobe ColdFusion has an unrestricted file upload vulnerability (CVE-2018-15961) that could allow attackers to execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2018-4878 is a use-after-free vulnerability in Adobe Flash Player that can lead to arbitrary code execution. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. It poses a high risk due to its potential for remote code execution.
Amcrest cameras and Network Video Recorders (NVR) have a stack-based buffer overflow vulnerability accessible via port 37777. This flaw allows an unauthenticated remote attacker to crash the device and potentially execute arbitrary code. The vulnerability is known to be exploited in the wild, indicating active threat usage. No specific affected versions or patches are provided in the available data.
CVE-2019-2215 is a use-after-free vulnerability in the Android Kernel's binder.c component that enables privilege escalation from an application to the Linux Kernel. It has been observed exploited in the wild, notably chained with CVE-2020-0041 and CVE-2020-0069 in the exploit chain known as "AbstractEmu." This vulnerability is classified as high severity due to its ability to elevate privileges on affected devices.
CVE-2020-0041 is an out-of-bounds write vulnerability in the Android Kernel's binder_transaction function due to an incorrect bounds check. This flaw can be exploited locally to escalate privileges. It has been observed in the wild as part of an exploit chain named "AbstractEmu," combined with other vulnerabilities CVE-2019-2215 and CVE-2020-0069. The vulnerability affects the Android Kernel but specific affected versions are not stated. The severity is high given its exploitation in the wild and potential for privilege escalation.
Multiple MediaTek chipsets have an insufficient input validation vulnerability in the Command Queue drivers' ioctl handlers, leading to out-of-bounds writes and privilege escalation. This issue is compounded by missing SELinux restrictions. The vulnerability has been observed exploited in the wild, often chained with other vulnerabilities (CVE-2019-2215 and CVE-2020-0041) in an exploit chain named "AbstractEmu."
CVE-2021-42013 is a path traversal vulnerability in Apache HTTP Server that enables remote code execution under certain conditions, such as when files outside Alias-like configured directories are accessible or when CGI scripts are enabled. This vulnerability is a follow-up to an incomplete patch for CVE-2021-41773 and has been exploited in the wild, including in ransomware campaigns.
CVE-2021-41773 is a path traversal vulnerability in Apache HTTP Server that can enable remote code execution if certain directory configurations or CGI scripts are present. The initial patch for this vulnerability was insufficient, and further remediation is detailed under CVE-2021-42013. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2019-0211 is a privilege escalation vulnerability in Apache HTTP Server affecting the MPM event, worker, and prefork modes. It allows code executing in less-privileged child processes or threads, including scripts run by in-process scripting interpreters, to execute with the privileges of the parent process, which is typically root. This vulnerability has been exploited in the wild.
Apache Shiro contains a vulnerability that allows remote attackers to execute code or bypass access restrictions if the "remember me" feature is used without configuring a cipher key. This vulnerability has been exploited in the wild and is considered high severity.
The Apache Solr VelocityResponseWriter plug-in contains a vulnerability that allows remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2020-17530 is a high-severity remote code execution vulnerability in Apache Struts. It arises from forced evaluation of Object-Graph Navigation Language (OGNL) expressions on raw user input within tag attributes. This flaw allows attackers to execute arbitrary code remotely. Exploitation of this vulnerability has been observed in the wild.
CVE-2018-11776 is a high severity remote code execution vulnerability in Apache Struts. It occurs under specific configuration conditions involving the alwaysSelectFullNamespace option and namespace settings in package configurations. Exploitation allows attackers to execute arbitrary code remotely. This vulnerability has been exploited in the wild.
CVE-2021-30858 is a use-after-free vulnerability in Apple iOS, iPadOS, and macOS WebKit that allows code execution when processing malicious web content. It affects HTML parsers using WebKit, including Apple Safari and other products relying on WebKit. The vulnerability has been exploited in the wild.
CVE-2019-6223 is a vulnerability in Apple iOS and macOS Group FaceTime that allows the call initiator to cause the recipient's device to answer a call without their knowledge or interaction. This flaw can lead to unauthorized audio or video access. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.