Security Radar

CVE-2021-21975 Severity under analysis Ransomware added on 01/18/2022

VMware Server Side Request Forgery in vRealize Operations Manager API

VMware · vRealize Operations Manager API · CWE-918

Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials.

CVE-2019-2725 Severity under analysis Ransomware added on 01/10/2022

Oracle WebLogic Server, Injection

Oracle · WebLogic Server · CWE-74

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

CVE-2019-1579 Severity under analysis Ransomware added on 01/10/2022

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks · PAN-OS · CWE-134

Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.

CVE-2019-1458 Severity under analysis Ransomware added on 01/10/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

CVE-2018-13383 Severity under analysis Ransomware added on 01/10/2022

Fortinet FortiOS and FortiProxy Out-of-bounds Write

Fortinet · FortiOS and FortiProxy · CWE-787

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.

CVE-2018-13382 Severity under analysis Ransomware added on 01/10/2022

Fortinet FortiOS and FortiProxy Improper Authorization

Fortinet · FortiOS and FortiProxy · CWE-285

An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

CVE-2021-43890 Severity under analysis Ransomware added on 12/15/2021

Microsoft Windows AppX Installer Spoofing Vulnerability

Microsoft · Windows

Microsoft Windows AppX Installer contains a spoofing vulnerability which has a high impacts to confidentiality, integrity, and availability.

CVE-2021-44228 Severity under analysis Ransomware added on 12/10/2021

Apache Log4j2 Remote Code Execution Vulnerability

Apache · Log4j2 · CWE-20, CWE-400, CWE-502

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

CVE-2021-40438 Severity under analysis Ransomware added on 12/01/2021

Apache HTTP Server-Side Request Forgery (SSRF)

Apache · Apache · CWE-918

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

CVE-2021-42321 Severity under analysis Ransomware added on 11/17/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange · CWE-184, CWE-502

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

CVE-2021-40449 Severity under analysis Ransomware added on 11/17/2021

Microsoft Windows Win32k Privilege Escalation Vulnerability

Microsoft · Windows · CWE-416

Unspecified vulnerability allows for an authenticated user to escalate privileges.

CVE-2021-42013 Severity under analysis Ransomware added on 11/03/2021

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server · CWE-22

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.

CVE-2021-41773 Severity under analysis Ransomware added on 11/03/2021

Apache HTTP Server Path Traversal Vulnerability

Apache · HTTP Server · CWE-22

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default �require all denied� or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.

CVE-2021-40444 Severity under analysis Ransomware added on 11/03/2021

Microsoft MSHTML Remote Code Execution Vulnerability

Microsoft · MSHTML · CWE-22

Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.

CVE-2021-38647 Severity under analysis Ransomware added on 11/03/2021

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft · Open Management Infrastructure (OMI) · CWE-1390

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

CVE-2021-36955 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-36942 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Microsoft · Windows · CWE-749

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

CVE-2021-34527 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

CVE-2021-34523 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server · CWE-287

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-34473 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

CVE-2021-31207 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server · CWE-20, CWE-434

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

CVE-2021-27065 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-39

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26858 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26857 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.