Security Radar

CVE-2021-38647 Severity under analysis Ransomware added on 11/03/2021

Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability

Microsoft · Open Management Infrastructure (OMI) · CWE-1390

Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.

CVE-2021-36955 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-36942 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability

Microsoft · Windows · CWE-749

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM.

CVE-2021-35464 Severity under analysis Ransomware added on 11/03/2021

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock · Access Management (AM) · CWE-502

ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).

CVE-2021-35211 Severity under analysis Ransomware added on 11/03/2021

SolarWinds Serv-U Remote Code Execution Vulnerability

SolarWinds · Serv-U · CWE-787

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

CVE-2021-34527 Severity under analysis Ransomware added on 11/03/2021

Microsoft Windows Print Spooler Remote Code Execution Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare.

CVE-2021-34523 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft · Exchange Server · CWE-287

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-34473 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.

CVE-2021-31207 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server · CWE-20, CWE-434

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

CVE-2021-30116 Severity under analysis Ransomware added on 11/03/2021

Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya · Virtual System/Server Administrator (VSA) · CWE-522

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.

CVE-2021-27104 Severity under analysis Ransomware added on 11/03/2021

Accellion FTA OS Command Injection Vulnerability

Accellion · FTA · CWE-20, CWE-78

Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

CVE-2021-27103 Severity under analysis Ransomware added on 11/03/2021

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion · FTA · CWE-918

Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

CVE-2021-27102 Severity under analysis Ransomware added on 11/03/2021

Accellion FTA OS Command Injection Vulnerability

Accellion · FTA · CWE-20, CWE-78

Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.

CVE-2021-27101 Severity under analysis Ransomware added on 11/03/2021

Accellion FTA SQL Injection Vulnerability

Accellion · FTA · CWE-89, CWE-138

Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

CVE-2021-27065 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-39

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26858 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26857 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26855 Severity under analysis Ransomware added on 11/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.

CVE-2021-26411 Severity under analysis Ransomware added on 11/03/2021

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-416

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption.

CVE-2021-26084 Severity under analysis Ransomware added on 11/03/2021

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Center · CWE-917

Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.

CVE-2021-22986 Severity under analysis Ransomware added on 11/03/2021

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Management · CWE-863

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.

CVE-2021-22893 Severity under analysis Ransomware added on 11/03/2021

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti · Pulse Connect Secure · CWE-287

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

CVE-2021-22205 Severity under analysis Ransomware added on 11/03/2021

GitLab Community and Enterprise Editions Remote Code Execution Vulnerability

GitLab · Community and Enterprise Editions · CWE-20, CWE-95

GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.

CVE-2021-22005 Severity under analysis Ransomware added on 11/03/2021

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Server · CWE-23

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code.