Security Radar

CVE-2016-0189 Severity under analysis Ransomware added on 03/28/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

The Microsoft JScript nd VBScript engines, as used in Internet Explorer and other products, allow attackers to execute remote code or cause a denial of service (memory corruption) via a crafted web site.

CVE-2016-0151 Severity under analysis Ransomware added on 03/28/2022

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

Microsoft · Client-Server Run-time Subsystem (CSRSS) · CWE-264

The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application.

CVE-2013-2551 Severity under analysis Ransomware added on 03/28/2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · CWE-416

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object.

CVE-2013-2465 Severity under analysis Ransomware added on 03/28/2022

Oracle Java SE Unspecified Vulnerability

Oracle · Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D

CVE-2022-21999 Severity under analysis Ransomware added on 03/25/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windows · CWE-40, CWE-1386

Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.

CVE-2021-42237 Severity under analysis Ransomware added on 03/25/2022

Sitecore XP Remote Command Execution Vulnerability

Sitecore · XP · CWE-502

Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.

CVE-2021-22941 Severity under analysis Ransomware added on 03/25/2022

Citrix ShareFile Improper Access Control Vulnerability

Citrix · ShareFile · CWE-284

Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller.

CVE-2020-2021 Severity under analysis Ransomware added on 03/25/2022

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-347

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication.

CVE-2019-15107 Severity under analysis Ransomware added on 03/25/2022

Webmin Command Injection Vulnerability

Webmin · Webmin · CWE-78

An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.

CVE-2019-11043 Severity under analysis Ransomware added on 03/25/2022

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

PHP · FastCGI Process Manager (FPM) · CWE-120

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

CVE-2018-1273 Severity under analysis Ransomware added on 03/25/2022

VMware Tanzu Spring Data Commons Property Binder Vulnerability

VMware Tanzu · Spring Data Commons · CWE-94

Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.

CVE-2018-11138 Severity under analysis Ransomware added on 03/25/2022

Quest KACE System Management Appliance Remote Command Execution Vulnerability

Quest · KACE System Management Appliance · CWE-78

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.

CVE-2017-12615 Severity under analysis Ransomware added on 03/25/2022

Apache Tomcat on Windows Remote Code Execution Vulnerability

Apache · Tomcat · CWE-434

When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

CVE-2017-0146 Severity under analysis Ransomware added on 03/25/2022

Microsoft Windows SMB Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.

CVE-2010-2861 Severity under analysis Ransomware added on 03/25/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-22

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

CVE-2020-5135 Severity under analysis Ransomware added on 03/15/2022

SonicWall SonicOS Buffer Overflow Vulnerability

SonicWall · SonicOS · CWE-120

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

CVE-2019-1405 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

CVE-2019-1322 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-1315 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

CVE-2019-1253 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

CVE-2019-1129 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-1069 Severity under analysis Ransomware added on 03/15/2022

Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Scheduler · CWE-59

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

CVE-2019-1064 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-0841 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.