IBM Planning Analytics contains a vulnerability (CVE-2019-4716) that allows an unauthenticated attacker to overwrite configuration settings, enabling login as the 'admin' user. This access permits execution of arbitrary code with root or SYSTEM privileges via TM1 scripting. The vulnerability has been exploited in the wild and is rated as high severity.
CVE-2016-3715 is a high-severity vulnerability in ImageMagick that allows arbitrary file deletion through the use of the 'ephemeral' pseudo protocol. This protocol deletes files after reading, and the vulnerability enables attackers to exploit this behavior to delete files on the system. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
ImageMagick contains a vulnerability that allows attackers to perform server-side request forgery (SSRF) by submitting a crafted image. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2020-15505 is a high-severity remote code execution vulnerability affecting multiple Ivanti MobileIron products including Core & Connector, Sentry, and Monitor and Reporting Database (RDB). The vulnerability allows an attacker to execute arbitrary code remotely. It has been exploited in the wild. No specific affected versions or patch information are provided.
Kaseya Virtual System/Server Administrator (VSA) has an information disclosure vulnerability (CVE-2021-30116) that allows attackers to obtain session IDs. These session IDs can be leveraged to conduct further attacks against the system. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information are provided.
CVE-2020-7961 is a deserialization of untrusted data vulnerability in Liferay Portal that allows remote attackers to execute arbitrary code via JSON web services. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2021-23874 is an improper privilege management vulnerability in McAfee Total Protection (MTP) that enables a local user to escalate privileges and execute code by bypassing MTP's self-defense mechanisms. This vulnerability has been exploited in the wild, indicating active use by threat actors. No specific affected versions or patch information are provided in the available data.
Micro Focus Access Manager has an information leakage vulnerability due to a SAML service provider redirection issue involving the Assertion Consumer Service URL. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2021-22502 is a high-severity remote code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR). The vulnerability is unspecified in detail but has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2014-1812 is a privilege escalation vulnerability in Microsoft Windows Active Directory related to the way Group Policy preferences distribute passwords. An authenticated attacker can exploit this flaw to decrypt stored passwords and elevate privileges within the domain. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions has a remote code execution vulnerability (CVE-2021-38647). This vulnerability is known to be exploited in the wild and has been used in ransomware campaigns. The specific technical details of the vulnerability are unspecified in the provided data.
CVE-2016-0167 is a high-severity privilege escalation vulnerability in Microsoft Win32k. It allows an attacker to escalate privileges via a crafted application. The vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information are provided in the available data.
CVE-2020-0878 is a memory corruption vulnerability in Microsoft Edge and Internet Explorer that enables attackers to execute code with the privileges of the current user. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns.
CVE-2021-31955 is an information disclosure vulnerability in the Microsoft Windows Kernel that allows a user-mode process to read kernel memory contents. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2021-1647 is a high-severity vulnerability in Microsoft Defender that allows remote code execution. The vulnerability details are unspecified, but it has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2021-33739 is a privilege escalation vulnerability in the Microsoft Desktop Window Manager (DWM) Core Library. It allows an attacker to gain elevated privileges on affected Windows systems. The vulnerability has been exploited in the wild. No specific affected versions or detailed technical information are provided in the available data.
CVE-2016-0185 is a remote code execution vulnerability in Microsoft Windows Media Center. The vulnerability occurs when Windows Media Center opens a specially crafted .mcl (Media Center link) file that references malicious code. This flaw allows attackers to execute arbitrary code remotely. The vulnerability has been exploited in the wild, indicating active attacks leveraging this issue. No specific affected versions or patch information is provided in the input data.
CVE-2020-0683 is a privilege escalation vulnerability in Microsoft Windows Installer. It occurs when MSI packages process symbolic links, allowing attackers to bypass access restrictions to add or remove files. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2020-17087 is a high-severity privilege escalation vulnerability in the Microsoft Windows kernel. The vulnerability is unspecified in detail but has been exploited in the wild. It allows attackers to elevate privileges on affected Windows systems. No specific affected versions or patch information is provided in the available data.
CVE-2021-33742 is a high-severity remote code execution vulnerability in the Microsoft Windows MSHTML platform. It allows an attacker to execute arbitrary code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.