Security Radar

CVE-2023-24489 Severity under analysis added on 08/16/2023

Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

Citrix · Content Collaboration · CWE-284

Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.

CVE-2023-38180 Severity under analysis added on 08/09/2023

Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

Microsoft · .NET Core and Visual Studio

Microsoft .NET Core and Visual Studio contain an unspecified vulnerability that allows for denial-of-service (DoS).

CVE-2023-35081 Severity under analysis added on 07/31/2023

Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · CWE-22

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

CVE-2023-35078 Severity under analysis Ransomware added on 07/25/2023

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Ivanti · Endpoint Manager Mobile (EPMM) · CWE-287

Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make other configuration changes including installing software and modifying security profiles on registered devices.

CVE-2023-38205 Severity under analysis added on 07/20/2023

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion · CWE-284

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

CVE-2023-29298 Severity under analysis added on 07/20/2023

Adobe ColdFusion Improper Access Control Vulnerability

Adobe · ColdFusion · CWE-284

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.

CVE-2023-3519 Severity under analysis Ransomware added on 07/19/2023

Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

Citrix · NetScaler ADC and NetScaler Gateway · CWE-94

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.

CVE-2023-36884 Severity under analysis Ransomware added on 07/17/2023

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft · Windows · CWE-362

Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.

CVE-2023-36874 Severity under analysis added on 07/11/2023

Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

Microsoft Windows Error Reporting Service contains an unspecified vulnerability that allows for privilege escalation.

CVE-2023-35311 Severity under analysis added on 07/11/2023

Microsoft Outlook Security Feature Bypass Vulnerability

Microsoft · Outlook · CWE-367

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

CVE-2023-32049 Severity under analysis added on 07/11/2023

Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.

CVE-2023-32046 Severity under analysis added on 07/11/2023

Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.

CVE-2023-20867 Severity under analysis added on 06/23/2023

VMware Tools Authentication Bypass Vulnerability

VMware · Tools · CWE-287

VMware Tools contains an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine. An attacker must have root access over ESXi to exploit this vulnerability.

CVE-2023-20887 Severity under analysis added on 06/22/2023

Vmware Aria Operations for Networks Command Injection Vulnerability

VMware · Aria Operations for Networks · CWE-77

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

CVE-2016-0165 Severity under analysis added on 06/22/2023

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-264

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

CVE-2023-27997 Severity under analysis Ransomware added on 06/13/2023

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS and FortiProxy SSL-VPN · CWE-122

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.

CVE-2023-3079 Severity under analysis added on 06/07/2023

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2023-34362 Severity under analysis Ransomware added on 06/02/2023

Progress MOVEit Transfer SQL Injection Vulnerability

Progress · MOVEit Transfer · CWE-89

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.

CVE-2016-6415 Severity under analysis added on 05/19/2023

Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

Cisco · IOS, IOS XR, and IOS XE · CWE-200

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

CVE-2004-1464 Severity under analysis added on 05/19/2023

Cisco IOS Denial-of-Service Vulnerability

Cisco · IOS

Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

CVE-2016-8735 Severity under analysis added on 05/12/2023

Apache Tomcat Remote Code Execution Vulnerability

Apache · Tomcat · CWE-284

Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.

CVE-2016-3427 Severity under analysis added on 05/12/2023

Oracle Java SE and JRockit Unspecified Vulnerability

Oracle · Java SE and JRockit

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.

CVE-2014-0196 Severity under analysis added on 05/12/2023

Linux Kernel Race Condition Vulnerability

Linux · Kernel · CWE-362

Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.

CVE-2010-3904 Severity under analysis added on 05/12/2023

Linux Kernel Improper Input Validation Vulnerability

Linux · Kernel · CWE-20

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.