Security Radar

CVE-2021-22991 Severity under analysis added on 01/18/2022

F5 BIG-IP Traffic Management Microkernel Buffer Overflow

F5 · BIG-IP Traffic Management Microkernel · CWE-119

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.

CVE-2021-21975 Severity under analysis Ransomware added on 01/18/2022

VMware Server Side Request Forgery in vRealize Operations Manager API

VMware · vRealize Operations Manager API · CWE-918

Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.

CVE-2020-14864 Severity under analysis added on 01/18/2022

Oracle Business Intelligence Enterprise Edition Path Transversal

Oracle · Intelligence Enterprise Edition · CWE-22

Path traversal vulnerability, where an attacker can target the preview FilePath parameter of the getPreviewImage function to get access to arbitrary system file.

CVE-2020-13927 Severity under analysis added on 01/18/2022

Apache Airflow's Experimental API Authentication Bypass

Apache · Airflow's Experimental API · CWE-1188, CWE-306

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication.

CVE-2020-11978 Severity under analysis added on 01/18/2022

Apache Airflow Command Injection

Apache · Airflow · CWE-78

A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.

CVE-2021-22017 Severity under analysis added on 01/10/2022

VMware vCenter Server Improper Access Control

VMware · vCenter Server · CWE-23

Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.

CVE-2020-6572 Severity under analysis added on 01/10/2022

Google Chrome Media Use-After-Free Vulnerability

Google · Chrome Media · CWE-416

Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page.

CVE-2019-2725 Severity under analysis Ransomware added on 01/10/2022

Oracle WebLogic Server, Injection

Oracle · WebLogic Server · CWE-74

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

CVE-2019-1579 Severity under analysis Ransomware added on 01/10/2022

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks · PAN-OS · CWE-134

Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.

CVE-2019-1458 Severity under analysis Ransomware added on 01/10/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

CVE-2018-13383 Severity under analysis Ransomware added on 01/10/2022

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Fortinet · FortiOS and FortiProxy · CWE-787

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.

CVE-2018-13382 Severity under analysis Ransomware added on 01/10/2022

Fortinet FortiOS and FortiProxy Improper Authorization

Fortinet · FortiOS and FortiProxy · CWE-285

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

CVE-2013-3900 Severity under analysis added on 01/10/2022

Microsoft WinVerifyTrust function Remote Code Execution

Microsoft · WinVerifyTrust function · CWE-20

A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.

CVE-2021-43890 Severity under analysis Ransomware added on 12/15/2021

Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft · Windows

Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

CVE-2021-4102 Severity under analysis added on 12/15/2021

Google Chromium V8 Use-After-Free Vulnerability

Google · Chromium V8 · CWE-416

Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2021-44228 Severity under analysis Ransomware added on 12/10/2021

Apache Log4j2 Remote Code Execution Vulnerability

Apache · Log4j2 · CWE-20, CWE-400, CWE-502

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

CVE-2021-44168 Severity under analysis added on 12/10/2021

Fortinet FortiOS Arbitrary File Download

Fortinet · FortiOS · CWE-494

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.

CVE-2019-13272 Severity under analysis added on 12/10/2021

Linux Kernel Improper Privilege Management Vulnerability

Linux · Kernel · CWE-269

Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.

CVE-2019-0193 Severity under analysis added on 12/10/2021

Apache Solr DataImportHandler Code Injection Vulnerability

Apache · Solr · CWE-94

The optional Apache Solr module DataImportHandler contains a code injection vulnerability.

CVE-2021-40438 Severity under analysis Ransomware added on 12/01/2021

Apache HTTP Server-Side Request Forgery (SSRF)

Apache · Apache · CWE-918

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

CVE-2021-42321 Severity under analysis Ransomware added on 11/17/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange · CWE-184, CWE-502

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

CVE-2021-42292 Severity under analysis added on 11/17/2021

Microsoft Excel Security Feature Bypass

Microsoft · Office · CWE-357

A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

CVE-2021-40449 Severity under analysis Ransomware added on 11/17/2021

Microsoft Windows Win32k Privilege Escalation Vulnerability

Microsoft · Windows · CWE-416

Unspecified vulnerability allows for an authenticated user to escalate privileges.

CVE-2021-42013 Severity under analysis Ransomware added on 11/03/2021

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server · CWE-22

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.