Cybersecurity Alerts | Nexus IT Services, LLC

The vulnerabilities listed below are sourced from the CISA Known Exploited Vulnerabilities catalog and represent security flaws that are actively being exploited in the wild. This list is updated daily. If you are unsure whether your systems are affected, contact us and we will help you assess your exposure.

Exim Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.

Added 2022-03-25
Remediation Deadline 2022-04-15

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

Added 2022-03-25
Remediation Deadline 2022-04-15

CVE-2010-2861Active Ransomware Campaign

Adobe | ColdFusion

Adobe ColdFusion Directory Traversal Vulnerability

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

Added 2022-03-25
Remediation Deadline 2022-04-15

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

Added 2022-03-25
Remediation Deadline 2022-04-15

phpMyAdmin | phpMyAdmin

phpMyAdmin Remote Code Execution Vulnerability

Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

Added 2022-03-25
Remediation Deadline 2022-04-15

Adobe | Reader and Acrobat

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

Added 2022-03-25
Remediation Deadline 2022-04-15

Hewlett Packard (HP) | OpenView Network Node Manager

HP OpenView Network Node Manager Remote Code Execution Vulnerability

HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

Added 2022-03-25
Remediation Deadline 2022-04-15

SonicWall | SonicOS

SonicWall SonicOS Buffer Overflow Vulnerability

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1405Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1322Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1315Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1253Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

Added 2022-03-15
Remediation Deadline 2022-04-05

Microsoft | Win32k

Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1129Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1069Active Ransomware Campaign

Microsoft | Task Scheduler

Microsoft Task Scheduler Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-1064Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-0841Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2019-0543Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2018-8120Active Ransomware Campaign

Microsoft | Win32k

Microsoft Win32k Privilege Escalation Vulnerability

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2017-0101Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2016-3309Active Ransomware Campaign

Microsoft | Windows

Microsoft Windows Kernel Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

Added 2022-03-15
Remediation Deadline 2022-04-05

CVE-2015-2546Active Ransomware Campaign

Microsoft | Win32k

Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

Added 2022-03-15
Remediation Deadline 2022-04-05

Mozilla | Firefox

Mozilla Firefox Use-After-Free Vulnerability

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

Added 2022-03-07
Remediation Deadline 2022-03-21

Mozilla | Firefox

Mozilla Firefox Use-After-Free Vulnerability

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

Added 2022-03-07
Remediation Deadline 2022-03-21

VMware | vCenter Server and Cloud Foundation

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

Added 2022-03-07
Remediation Deadline 2022-03-21

Pulse Secure | Pulse Connect Secure

Pulse Connect Secure Code Injection Vulnerability

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

Added 2022-03-07
Remediation Deadline 2022-09-07

Atlassian | Jira Server and Data Center

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

Added 2022-03-07
Remediation Deadline 2022-09-07

NETGEAR | Wireless Router DGN2200

NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

Added 2022-03-07
Remediation Deadline 2022-09-07

NETGEAR | Multiple Routers

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

Added 2022-03-07
Remediation Deadline 2022-09-07

Adobe | ColdFusion

Adobe ColdFusion Information Disclosure Vulnerability

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

Added 2022-03-07
Remediation Deadline 2022-09-07

← Prev 1 2 3…35 36 37 38 39 40 41 42 43…54 55 56 Next →

← Prev 1…38 39 40…56 Next →