ProFTPD contains an improper access control vulnerability that allows remote attackers to read and write arbitrary files using the site cpfr and site cpto commands. This vulnerability has been exploited in the wild and is considered high severity.
Apache Struts contains a command injection vulnerability identified as CVE-2016-3081. This flaw allows remote attackers to execute arbitrary code via the method:prefix parameter when Dynamic Method Invocation is enabled. The vulnerability has been exploited in the wild, indicating active use by attackers. No specific affected versions or patch information is provided in the available data.
ONLYOFFICE Docs Server has a path traversal vulnerability (CVE-2021-3199) that occurs when JSON Web Tokens (JWT) are used. The flaw involves a /.. sequence in an image upload parameter, which could allow an attacker to execute remote code on the server. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2015-5477 is a vulnerability in ISC BIND that causes data processing errors when handling TKEY DNS resource record requests. This flaw can lead to a denial of service by causing the BIND DNS server (named) to exit unexpectedly due to an assertion failure triggered by specially crafted DNS queries. The vulnerability affects multiple Red Hat Enterprise Linux versions, and patches have been released to address the issue. Exploitation in the wild has been observed.
CVE-2026-76504 is a critical vulnerability in Cisco Catalyst SD-WAN Manager involving improper handling of URI hex encoding in HTTP requests. This flaw allows an unauthenticated remote attacker to gain admin-level privileges on the affected system. The vulnerability has a CVSS score of 9.8 and is known to be exploited in the wild. No specific affected versions or patch information are provided in the available data.
WordPress Core has a remote file inclusion vulnerability that allows unauthenticated attackers to include a chosen readable local PHP file outside the active theme directories. This can lead to remote code execution. The vulnerability has a high severity score of 8.1 and has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2026-87886 is a high-severity vulnerability in the Acronis Backup plugin for cPanel & WHM and extension for Plesk. It involves incorrect default permissions that could allow privilege escalation. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
ownCloud suffers from an improper authentication vulnerability (CVE-2023-49105) that permits attackers to access, modify, or delete any file without authentication if they know the victim's username and the victim has no signing-key configured. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.
CVE-2015-5287 is a privilege escalation vulnerability in Red Hat's Automatic Bug Reporting Tool (ABRT). It allows local users with certain permissions to gain elevated privileges via a symlink attack on a file with a predictable name. The affected product versions may be end-of-life or end-of-service, and users are advised to discontinue use or upgrade to supported versions.
CVE-2022-0995 is an out-of-bounds memory write vulnerability in the Linux Kernel that allows a local user to gain privileged access or cause a denial of service. It has been exploited in the wild. No specific affected versions or patch information are provided.
CVE-2019-1068 is a remote code execution vulnerability in Microsoft SQL Server that allows an attacker to execute code with the privileges of the SQL Server Database Engine service account. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Ajax.NET Professional (AjaxPro) suffers from a deserialization of untrusted data vulnerability that can lead to remote code execution by processing arbitrary .NET classes. The affected product may be end-of-life or end-of-service, and users are advised to discontinue its use or migrate to supported alternatives. Exploitation in the wild has been observed.
CVE-2015-3246 is a race condition vulnerability in Red Hat libuser that allows authenticated local users to corrupt the /etc/passwd file, potentially causing denial of service or privilege escalation. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
Gitea has a critical code injection vulnerability (CVE-2026-60004) that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint. This enables planting an executable Git hook that runs shell commands with the privileges of the Gitea service account. The vulnerability has a high CVSS score of 9.8 and is known to be exploited in the wild.
Metabase has a critical SQL Injection vulnerability (CVE-2026-72898) that allows unauthenticated remote attackers to inject arbitrary SQL into the application database. Successful exploitation can grant attackers administrator access, enabling them to alter configurations, steal stored database credentials, access connected data, and export sensitive information. This vulnerability has a CVSS score of 10 and is known to be exploited in the wild.
CVE-2026-0770 is a critical vulnerability in Langflow that allows remote attackers to execute arbitrary code by including functionality from an untrusted control sphere. This vulnerability has a CVSS score of 9.8, indicating a high severity with network attack vector, no required privileges or user interaction, and impacts confidentiality, integrity, and availability. It is known to be exploited in the wild. No specific affected versions or patches are currently provided.
CVE-2026-63030 is a critical vulnerability in WordPress Core involving an interpretation conflict that enables attackers to perform SQL Injection and potentially achieve Remote Code Execution. It can be chained with another vulnerability, CVE-2026-60137, to escalate impact. The vulnerability has a high CVSS score of 9.8 and is known to be exploited in the wild.
DD-WRT contains a stack-based buffer overflow vulnerability in its UPnP implementation that allows unauthenticated attackers to overflow an internal buffer and potentially execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patches are provided in the available data.
CVE-2023-4346 is a vulnerability in the KNX Association's KNX Protocol Connection Authorization Option 1, involving an overly restrictive account lockout mechanism. This flaw could allow an attacker to purge all devices that do not have additional security options enabled and set a BCU key to lock the device. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided.
Cisco IOS 12.4 contains multiple cross-site request forgery (CSRF) vulnerabilities that allow remote attackers to execute arbitrary commands by exploiting specific URIs related to privilege and configuration commands. These vulnerabilities enable unauthorized command execution via crafted HTTP requests targeting the device's web interface.