Security Radar

CVE-2009-3960 Severity under analysis Ransomware added on 03/07/2022

Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDS

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

CVE-2021-41379 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows · CWE-1386

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.

CVE-2018-8581 Severity under analysis Ransomware added on 03/03/2022

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

CVE-2016-4117 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.

CVE-2016-1019 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2016-0099 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.

CVE-2015-7645 Severity under analysis Ransomware added on 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.

CVE-2015-1701 Severity under analysis Ransomware added on 03/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-264

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.

CVE-2012-4681 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.

CVE-2012-1723 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

CVE-2012-0507 Severity under analysis Ransomware added on 03/03/2022

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

CVE-2010-0188 Severity under analysis Ransomware added on 03/03/2022

Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability

Adobe · Reader and Acrobat · CWE-94

Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code.

CVE-2008-2992 Severity under analysis Ransomware added on 03/03/2022

Adobe Reader and Acrobat Input Validation Vulnerability

Adobe · Acrobat and Reader · CWE-119

Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution.

CVE-2019-0752 Severity under analysis Ransomware added on 02/15/2022

Microsoft Internet Explorer Type Confusion Vulnerability

Microsoft · Internet Explorer · CWE-843

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer

CVE-2018-8174 Severity under analysis Ransomware added on 02/15/2022

Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability

Microsoft · Windows · CWE-787

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution"

CVE-2018-15982 Severity under analysis Ransomware added on 02/15/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability

CVE-2020-0796 Severity under analysis Ransomware added on 02/10/2022

Microsoft SMBv3 Remote Code Execution Vulnerability

Microsoft · SMBv3 · CWE-119

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client.

CVE-2017-10271 Severity under analysis Ransomware added on 02/10/2022

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle · WebLogic Server

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

CVE-2017-0145 Severity under analysis Ransomware added on 02/10/2022

Microsoft SMBv1 Remote Code Execution Vulnerability

Microsoft · SMBv1 · CWE-20

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

CVE-2017-0144 Severity under analysis Ransomware added on 02/10/2022

Microsoft SMBv1 Remote Code Execution Vulnerability

Microsoft · SMBv1 · CWE-20

The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets.

CVE-2022-21882 Severity under analysis Ransomware added on 02/04/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-787

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-20038 Severity under analysis Ransomware added on 01/28/2022

SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability

SonicWall · SMA 100 Appliances · CWE-121

SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution.

CVE-2020-0787 Severity under analysis Ransomware added on 01/28/2022

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft · Windows · CWE-269, CWE-59

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges.

CVE-2018-8453 Severity under analysis Ransomware added on 01/21/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges.