Security Radar

CVE-2023-27997 Severity under analysis Ransomware added on 06/13/2023

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS and FortiProxy SSL-VPN · CWE-122

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.

CVE-2023-34362 Severity under analysis Ransomware added on 06/02/2023

Progress MOVEit Transfer SQL Injection Vulnerability

Progress · MOVEit Transfer · CWE-89

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.

CVE-2021-45046 Severity under analysis Ransomware added on 05/01/2023

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Apache · Log4j2 · CWE-917

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

CVE-2023-28252 Severity under analysis Ransomware added on 04/11/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-122

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2019-1388 Severity under analysis Ransomware added on 04/07/2023

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.

CVE-2023-24880 Severity under analysis Ransomware added on 03/14/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows · CWE-863

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

CVE-2023-23376 Severity under analysis Ransomware added on 02/14/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-122

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2022-21587 Severity under analysis Ransomware added on 02/02/2023

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite · CWE-306

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

CVE-2022-41080 Severity under analysis Ransomware added on 01/10/2023

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

CVE-2022-44698 Severity under analysis Ransomware added on 12/13/2022

Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

Microsoft · Defender · CWE-755

Microsoft Defender SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

CVE-2022-42475 Severity under analysis Ransomware added on 12/13/2022

Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS · CWE-197

Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.

CVE-2022-26501 Severity under analysis Ransomware added on 12/13/2022

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replication · CWE-306

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

CVE-2022-26500 Severity under analysis Ransomware added on 12/13/2022

Veeam Backup & Replication Remote Code Execution Vulnerability

Veeam · Backup & Replication · CWE-22

The Veeam Distribution Service in the Backup & Replication application allows unauthenticated users to access internal API functions. A remote attacker can send input to the internal API which may lead to uploading and executing of malicious code.

CVE-2022-41091 Severity under analysis Ransomware added on 11/08/2022

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windows · CWE-863

Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

CVE-2022-41073 Severity under analysis Ransomware added on 11/08/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windows · CWE-787

Microsoft Windows Print Spooler contains an unspecified vulnerability that allows an attacker to gain SYSTEM-level privileges.

CVE-2020-3433 Severity under analysis Ransomware added on 10/24/2022

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Cisco · AnyConnect Secure · CWE-427

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.

CVE-2020-3153 Severity under analysis Ransomware added on 10/24/2022

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco · AnyConnect Secure · CWE-427

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.

CVE-2022-40684 Severity under analysis Ransomware added on 10/11/2022

Fortinet Multiple Products Authentication Bypass Vulnerability

Fortinet · Multiple Products · CWE-288

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

CVE-2022-41082 Severity under analysis Ransomware added on 09/30/2022

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.

CVE-2022-41040 Severity under analysis Ransomware added on 09/30/2022

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server allows for server-side request forgery. Dubbed "ProxyNotShell," this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.

CVE-2022-37969 Severity under analysis Ransomware added on 09/14/2022

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-20, CWE-787

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2018-13374 Severity under analysis Ransomware added on 09/08/2022

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Fortinet · FortiOS and FortiADC · CWE-732

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.

CVE-2022-30190 Severity under analysis Ransomware added on 06/14/2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windows · CWE-610

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

CVE-2022-26134 Severity under analysis Ransomware added on 06/02/2022

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian · Confluence Server/Data Center · CWE-917

Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.