#ExploitObserverAlert

CVE-2017-0146

DESCRIPTION: Exploit Observer has 58 entries related to CVE-2017-0146. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148.

FIRST-EPSS: 0.971460000
NVD-IS: 5.9
NVD-ES: 2.2

#ExploitObserverAlert

CVE-2023-31048

DESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-31048.

FIRST-EPSS: 0.000450000

#ExploitObserverAlert

CVE-2020-13238

DESCRIPTION: Exploit Observer has 3 entries related to CVE-2020-13238. Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack consumes excessive CPU time. After halting, physical access to the PLC is required in order to restore production.

FIRST-EPSS: 0.002600000
NVD-IS: 3.6
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2020-14974

DESCRIPTION: Exploit Observer has 2 entries related to CVE-2020-14974. The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL code 0x222124.

FIRST-EPSS: 0.000440000
NVD-IS: 5.2
NVD-ES: 1.8

#ExploitObserverAlert

CVE-2021-4428

DESCRIPTION: Exploit Observer has 25 entries related to CVE-2021-4428. A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the component Setting Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 4.0.1 is able to address this issue. The patch is named dd59cbac5f86057d6a73b87007c08b8bfa0c32ac. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-234247.

FIRST-EPSS: 0.000610000
NVD-IS: 3.6
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2017-0782

DESCRIPTION: Exploit Observer has 12 entries related to CVE-2017-0782. A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63146237.

FIRST-EPSS: 0.006140000
NVD-IS: 5.9
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2017-0143

DESCRIPTION: Exploit Observer has 161 entries related to CVE-2017-0143. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

FIRST-EPSS: 0.973010000
NVD-IS: 5.9
NVD-ES: 2.2

#ExploitObserverAlert

CVE-2022-21907

DESCRIPTION: Exploit Observer has 66 entries related to CVE-2022-21907. HTTP Protocol Stack Remote Code Execution Vulnerability.

FIRST-EPSS: 0.891490000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2017-8046

DESCRIPTION: Exploit Observer has 47 entries related to CVE-2017-8046. Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

FIRST-EPSS: 0.492630000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2019-11510

DESCRIPTION: Exploit Observer has 91 entries related to CVE-2019-11510. In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability .

FIRST-EPSS: 0.972780000
NVD-IS: 6.0
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-44487

DESCRIPTION: Exploit Observer has 85 entries related to CVE-2023-44487. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

FIRST-EPSS: 0.601570000
NVD-IS: 3.6
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2017-7672

DESCRIPTION: Exploit Observer has 8 entries related to CVE-2017-7672. If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.

FIRST-EPSS: 0.053570000
NVD-IS: 3.6
NVD-ES: 2.2

#ExploitObserverAlert

CVE-2021-36369

DESCRIPTION: Exploit Observer has 5 entries related to CVE-2021-36369. An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.

FIRST-EPSS: 0.000870000
NVD-IS: 3.6
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2021-34527

DESCRIPTION: Exploit Observer has 198 entries related to CVE-2021-34527. Windows Print Spooler Remote Code Execution Vulnerability

FIRST-EPSS: 0.968610000
NVD-IS: 5.9
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2016-4438

DESCRIPTION: Exploit Observer has 17 entries related to CVE-2016-4438. The REST plugin in Apache Struts 2 2.3.19 through 2.3.28.1 allows remote attackers to execute arbitrary code via a crafted expression.

FIRST-EPSS: 0.066830000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2022-30967

DESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-30967. Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variable parameters on views displaying parameters, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

FIRST-EPSS: 0.000770000
NVD-IS: 2.7
NVD-ES: 2.3

#ExploitObserverAlert

CVE-2020-14364

DESCRIPTION: Exploit Observer has 25 entries related to CVE-2020-14364. An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions before 5.2.0. This issue occurs while processing USB packets from a guest when USBDevice 'setup_len' exceeds its 'data_buf[4096]' in the do_token_in, do_token_out routines. This flaw allows a guest user to crash the QEMU process, resulting in a denial of service, or the potential execution of arbitrary code with the privileges of the QEMU process on the host.

FIRST-EPSS: 0.000470000
NVD-IS: 3.7
NVD-ES: 0.8

#ExploitObserverAlert

CVE-2020-14975

DESCRIPTION: Exploit Observer has 2 entries related to CVE-2020-14975. The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.

FIRST-EPSS: 0.000510000
NVD-IS: 5.9
NVD-ES: 1.8

#ExploitObserverAlert

CVE-2022-22954

DESCRIPTION: Exploit Observer has 103 entries related to CVE-2022-22954. VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result in remote code execution.

FIRST-EPSS: 0.974020000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2021-1801

DESCRIPTION: Exploit Observer has 15 entries related to CVE-2021-1801. This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy.

FIRST-EPSS: 0.002300000
NVD-IS: 3.6
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2022-41040

DESCRIPTION: Exploit Observer has 99 entries related to CVE-2022-41040. Microsoft Exchange Server Elevation of Privilege Vulnerability.

FIRST-EPSS: 0.965310000
NVD-IS: 5.9
NVD-ES: 2.8