CVE-2021-21224 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to execute code within the sandbox by crafting a malicious HTML page. This vulnerability affects multiple Chromium-based web browsers such as Google Chrome, Microsoft Edge, and Opera. Exploits have been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-21193 is a use-after-free vulnerability in Google Chromium Blink that allows remote attackers to potentially cause heap corruption via a crafted HTML page. This vulnerability affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild, indicating active attacks leveraging this flaw.
CVE-2021-21220 is an improper input validation vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple web browsers that use Chromium, such as Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-30563 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. Exploitation in the wild has been observed. No specific affected versions or patch information is provided in the available data.
IBM Data Risk Manager contains a directory traversal vulnerability that allows a remote authenticated attacker to traverse directories and download arbitrary files by sending specially crafted URL requests. This vulnerability has been exploited in the wild and is considered high severity. No specific affected versions or patch information is provided in the available data.
IBM Data Risk Manager has a security bypass vulnerability (CVE-2020-4427) that affects configurations using SAML authentication. An attacker can send a specially crafted HTTP request to bypass authentication and gain full administrative access. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2020-4428 is a high-severity vulnerability in IBM Data Risk Manager that allows a remote, authenticated attacker to execute arbitrary commands on the affected system. The vulnerability is related to improper input handling that could lead to command injection (CWE-78). Exploits for this vulnerability have been observed in the wild. No specific affected versions or patch information is provided in the available data.
IBM Planning Analytics contains a vulnerability (CVE-2019-4716) that allows an unauthenticated attacker to overwrite configuration settings, enabling login as the 'admin' user. This access permits execution of arbitrary code with root or SYSTEM privileges via TM1 scripting. The vulnerability has been exploited in the wild and is rated as high severity.
CVE-2016-3715 is a high-severity vulnerability in ImageMagick that allows arbitrary file deletion through the use of the 'ephemeral' pseudo protocol. This protocol deletes files after reading, and the vulnerability enables attackers to exploit this behavior to delete files on the system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
ImageMagick contains a vulnerability that allows attackers to perform server-side request forgery (SSRF) by submitting a crafted image. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2020-15505 is a high-severity remote code execution vulnerability affecting multiple Ivanti MobileIron products including Core & Connector, Sentry, and Monitor and Reporting Database (RDB). The vulnerability allows an attacker to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information are provided.
Kaseya Virtual System/Server Administrator (VSA) has an information disclosure vulnerability (CVE-2021-30116) that allows attackers to obtain session IDs. These session IDs can be leveraged to conduct further attacks against the system. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information are provided.
CVE-2020-7961 is a deserialization of untrusted data vulnerability in Liferay Portal that allows remote attackers to execute arbitrary code via JSON web services. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-23874 is an improper privilege management vulnerability in McAfee Total Protection (MTP) that enables a local user to escalate privileges and execute code by bypassing MTP's self-defense mechanisms. This vulnerability has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information are provided in the available data.
Micro Focus Access Manager has an information leakage vulnerability due to a SAML service provider redirection issue involving the Assertion Consumer Service URL. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2021-22502 is a high-severity remote code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR). The vulnerability is unspecified in detail but has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2014-1812 is a privilege escalation vulnerability in Microsoft Windows Active Directory related to the way Group Policy preferences distribute passwords. An authenticated attacker can exploit this flaw to decrypt stored passwords and elevate privileges within the domain. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions has a remote code execution vulnerability (CVE-2021-38647). This vulnerability is known to be exploited in the wild and has been used in ransomware campaigns. The specific technical details of the vulnerability are unspecified in the provided data.
CVE-2016-0167 is a high-severity privilege escalation vulnerability in Microsoft Win32k. It allows an attacker to escalate privileges via a crafted application. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided in the available data.
CVE-2020-0878 is a memory corruption vulnerability in Microsoft Edge and Internet Explorer that enables attackers to execute code with the privileges of the current user. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.