Security Radar

CVE-2016-0034 Severity under analysis Ransomware added on 05/25/2022

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Microsoft · Silverlight · CWE-20

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS).

CVE-2013-0431 Severity under analysis Ransomware added on 05/25/2022

Oracle JRE Sandbox Bypass Vulnerability

Oracle · Java Runtime Environment (JRE)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.

CVE-2013-0422 Severity under analysis Ransomware added on 05/25/2022

Oracle JRE Remote Code Execution Vulnerability

Oracle · Java Runtime Environment (JRE) · CWE-264

A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.

CVE-2013-0074 Severity under analysis Ransomware added on 05/25/2022

Microsoft Silverlight Double Dereference Vulnerability

Microsoft · Silverlight

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application.

CVE-2012-1710 Severity under analysis Ransomware added on 05/25/2022

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer.

CVE-2017-0147 Severity under analysis Ransomware added on 05/24/2022

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Microsoft · SMBv1 server · CWE-200

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet.

CVE-2016-3351 Severity under analysis Ransomware added on 05/24/2022

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Microsoft · Internet Explorer and Edge · CWE-200

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer.

CVE-2020-0638 Severity under analysis Ransomware added on 05/23/2022

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft · Update Notification Manager

Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

CVE-2019-1385 Severity under analysis Ransomware added on 05/23/2022

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

CVE-2019-1130 Severity under analysis Ransomware added on 05/23/2022

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.

CVE-2022-1388 Severity under analysis Ransomware added on 05/10/2022

F5 BIG-IP Missing Authentication Vulnerability

F5 · BIG-IP · CWE-306

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.

CVE-2022-22954 Severity under analysis Ransomware added on 04/14/2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager · CWE-94

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

CVE-2022-24521 Severity under analysis Ransomware added on 04/13/2022

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-787, CWE-1285

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-42287 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-42278 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2017-0148 Severity under analysis Ransomware added on 04/06/2022

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 server · CWE-20

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets.

CVE-2021-38646 Severity under analysis Ransomware added on 03/28/2022

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution.

CVE-2021-26085 Severity under analysis Ransomware added on 03/28/2022

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server · CWE-425

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint.

CVE-2021-20028 Severity under analysis Ransomware added on 03/28/2022

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA) · CWE-89

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection.

CVE-2018-8440 Severity under analysis Ransomware added on 03/28/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).

CVE-2018-8406 Severity under analysis Ransomware added on 03/28/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

CVE-2018-8405 Severity under analysis Ransomware added on 03/28/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory.

CVE-2017-0213 Severity under analysis Ransomware added on 03/28/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application.

CVE-2016-0189 Severity under analysis Ransomware added on 03/28/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.