Security Radar

CVE-2010-3035 Severity under analysis added on 03/25/2022

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XR · CWE-20

Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

CVE-2010-2861 Severity under analysis Ransomware added on 03/25/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-22

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

CVE-2009-2055 Severity under analysis added on 03/25/2022

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XR · CWE-20

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

CVE-2009-0927 Severity under analysis added on 03/25/2022

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Adobe · Reader and Acrobat · CWE-20

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

CVE-2020-5135 Severity under analysis Ransomware added on 03/15/2022

SonicWall SonicOS Buffer Overflow Vulnerability

SonicWall · SonicOS · CWE-120

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

CVE-2019-1405 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

CVE-2019-1322 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-1315 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

CVE-2019-1253 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

CVE-2019-1132 Severity under analysis added on 03/15/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

CVE-2019-1129 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-1069 Severity under analysis Ransomware added on 03/15/2022

Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Scheduler · CWE-59

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

CVE-2019-1064 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-0841 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-0543 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2018-8120 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

CVE-2017-0101 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

CVE-2016-3309 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

CVE-2015-2546 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

CVE-2021-21973 Severity under analysis added on 03/07/2022

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundation · CWE-20, CWE-918

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

CVE-2019-11581 Severity under analysis added on 03/07/2022

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Center · CWE-74

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

CVE-2013-0631 Severity under analysis added on 03/07/2022

Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusion · CWE-200

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

CVE-2013-0629 Severity under analysis added on 03/07/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-264

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

CVE-2013-0625 Severity under analysis added on 03/07/2022

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion · CWE-255

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.