Draytek VigorConnect has a path traversal vulnerability in the DownloadFileServlet endpoint that allows unauthenticated attackers to download arbitrary files from the underlying operating system with root privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2021-31196 is a high-severity information disclosure vulnerability in Microsoft Exchange Server that has been exploited in the wild. It allows an attacker to remotely execute code on affected systems. No specific affected versions or patch information is provided in the available data.
CVE-2022-0185 is a heap-based buffer overflow vulnerability in the Linux kernel's legacy_parse_param function within the Filesystem Context functionality. This flaw allows an attacker to open a filesystem that does not support the Filesystem Context API, potentially leading to privilege escalation. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Dahua IP cameras and related products have an authentication bypass vulnerability that occurs when the client specifies the loopback device during authentication. This flaw allows attackers to bypass authentication controls. The vulnerability is known to be exploited in the wild and is classified as high severity. No specific affected versions or patch information is provided.
Dahua IP cameras and related products have an authentication bypass vulnerability identified as CVE-2021-33044. This flaw occurs when the NetKeyboard type argument is specified by the client during authentication, allowing bypass of normal authentication controls. The vulnerability is known to be exploited in the wild and is rated with high severity. No specific affected versions or patch information is provided in the available data.
CVE-2018-0824 is a vulnerability in Microsoft COM for Windows involving deserialization of untrusted data. This flaw can be exploited via specially crafted files or scripts to achieve privilege escalation and remote code execution. It has been observed exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2012-4792 is a use-after-free vulnerability in Microsoft Internet Explorer that allows remote attackers to execute arbitrary code by triggering access to an improperly allocated or deleted object, specifically demonstrated with a CDwnBindInfo object. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
VMware vCenter Server has a vulnerability due to incorrect default file permissions that can allow a remote, privileged attacker to access sensitive information. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2020-13965 is a high-severity cross-site scripting (XSS) vulnerability in Roundcube Webmail. It allows a remote attacker to manipulate data by sending a malicious XML attachment. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2022-2586 is a use-after-free vulnerability in the Linux Kernel's nft_object component that allows local attackers to escalate privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
OSGeo GeoServer JAI-EXT contains a code injection vulnerability (CVE-2022-24816) that can lead to remote code execution when Jiffle scripts are accepted via network requests in programs using jt-jiffle. This vulnerability has been exploited in the wild and is considered high severity.
CVE-2017-3506 is an OS command injection vulnerability in Oracle WebLogic Server, part of the Fusion Middleware suite. It allows attackers to execute arbitrary code by sending a specially crafted HTTP request containing a malicious XML document. This vulnerability has been exploited in the wild. Oracle released patches for affected versions as part of their April 2017 Critical Patch Update and strongly recommends applying these patches promptly.
Apache Flink contains an improper access control vulnerability (CVE-2020-17519) that allows an attacker to read any file on the local filesystem of the JobManager via its REST interface. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
The D-Link DIR-605 router has an information disclosure vulnerability (CVE-2021-40655) that allows attackers to obtain a username and password by sending a forged POST request to the /getcfg.php page. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
The D-Link DIR-600 router is affected by a cross-site request forgery (CSRF) vulnerability that enables attackers to change router configurations by hijacking an active administrator session. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2024-4040 is a high-severity vulnerability in CrushFTP that allows a remote attacker to escape the virtual file system (VFS) sandbox. This sandbox escape enables the attacker to potentially access or manipulate files outside the intended restricted environment. The vulnerability has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided in the available data.
CVE-2022-38028 is a privilege escalation vulnerability in the Microsoft Windows Print Spooler service. It allows an attacker to modify a JavaScript constraints file and execute it with SYSTEM-level permissions. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
The Nice Linear eMerge E3-Series product contains an OS command injection vulnerability (CVE-2019-7256) that enables remote code execution by an attacker. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2021-44529 is a code injection vulnerability in Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) that allows unauthenticated users to execute malicious code with limited permissions. This vulnerability has been exploited in the wild and is associated with known ransomware campaigns. The flaw involves CWE-94, indicating improper control of code injection. No specific affected versions or patch information is provided.
Sunhillo SureLine contains an OS command injection vulnerability in the /cgi/networkDiag.cgi endpoint. This flaw allows attackers to inject shell metacharacters via the ipAddr or dnsAddr parameters, potentially causing denial-of-service or enabling persistent unauthorized access on the network. The vulnerability is known to be exploited in the wild. No specific affected versions or patches are provided in the available data.