Security Radar

CVE-2015-5123 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

CVE-2015-5122 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

CVE-2015-3113 Severity under analysis added on 04/13/2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player · CWE-119

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2015-2502 Severity under analysis added on 04/13/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).

CVE-2015-0313 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2015-0311 Severity under analysis added on 04/13/2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2014-9163 Severity under analysis added on 04/13/2022

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.

CVE-2021-42287 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-42278 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-39793 Severity under analysis added on 04/11/2022

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixel · CWE-787

Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.

CVE-2021-22600 Severity under analysis added on 04/11/2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel · CWE-415

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

CVE-2021-31166 Severity under analysis added on 04/06/2022

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stack · CWE-416

Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution.

CVE-2017-0148 Severity under analysis Ransomware added on 04/06/2022

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 server · CWE-20

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.

CVE-2022-22965 Severity under analysis added on 04/04/2022

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware · Spring Framework · CWE-94

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

CVE-2021-34484 Severity under analysis added on 03/31/2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

CVE-2022-1096 Severity under analysis added on 03/28/2022

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-38646 Severity under analysis Ransomware added on 03/28/2022

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

CVE-2021-34486 Severity under analysis added on 03/28/2022

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft · Windows · CWE-416

Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation.

CVE-2021-26085 Severity under analysis Ransomware added on 03/28/2022

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server · CWE-425

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

CVE-2021-20028 Severity under analysis Ransomware added on 03/28/2022

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA) · CWE-89

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

CVE-2019-7483 Severity under analysis added on 03/28/2022

SonicWall SMA100 Directory Traversal Vulnerability

SonicWall · SMA100 · CWE-22

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.

CVE-2018-8440 Severity under analysis Ransomware added on 03/28/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

CVE-2018-8406 Severity under analysis Ransomware added on 03/28/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

CVE-2018-8405 Severity under analysis Ransomware added on 03/28/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.