Security Radar

CVE-2022-3236 Severity under analysis added on 09/23/2022

Sophos Firewall Code Injection Vulnerability

Sophos · Firewall · CWE-94

A code injection vulnerability in the User Portal and Webadmin of Sophos Firewall allows for remote code execution.

CVE-2022-35405 Severity under analysis added on 09/22/2022

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho · ManageEngine · CWE-502

Zoho ManageEngine PAM360, Password Manager Pro, and Access Manager Plus contain an unspecified vulnerability that allows for remote code execution.

CVE-2022-40139 Severity under analysis added on 09/15/2022

Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

Trend Micro · Apex One and Apex One as a Service · CWE-353, CWE-641

Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

CVE-2013-6282 Severity under analysis added on 09/15/2022

Linux Kernel Improper Input Validation Vulnerability

Linux · Kernel · CWE-20

The get_user and put_user API functions of the Linux kernel fail to validate the target address when being used on ARM v6k/v7 platforms. This allows an application to read and write kernel memory which could lead to privilege escalation.

CVE-2013-2597 Severity under analysis added on 09/15/2022

Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

Code Aurora · ACDB Audio Driver · CWE-119

The Code Aurora audio calibration database (acdb) audio driver contains a stack-based buffer overflow vulnerability that allows for privilege escalation. Code Aurora is used in third-party products such as Qualcomm and Android.

CVE-2013-2596 Severity under analysis added on 09/15/2022

Linux Kernel Integer Overflow Vulnerability

Linux · Kernel · CWE-189

Linux kernel fb_mmap function in drivers/video/fbmem.c contains an integer overflow vulnerability that allows for privilege escalation.

CVE-2013-2094 Severity under analysis added on 09/15/2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel · CWE-189

Linux kernel fails to check all 64 bits of attr.config passed by user space, resulting to out-of-bounds access of the perf_swevent_enabled array in sw_perf_event_destroy(). Explotation allows for privilege escalation.

CVE-2010-2568 Severity under analysis added on 09/15/2022

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.

CVE-2022-37969 Severity under analysis Ransomware added on 09/14/2022

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-20, CWE-787

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2022-32917 Severity under analysis added on 09/14/2022

Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Apple · iOS, iPadOS, and macOS · CWE-20, CWE-787

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

CVE-2022-3075 Severity under analysis added on 09/08/2022

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google · Chromium Mojo · CWE-20

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVE-2022-27593 Severity under analysis Ransomware added on 09/08/2022

QNAP Photo Station Externally Controlled Reference Vulnerability

QNAP · Photo Station · CWE-610

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.

CVE-2022-26258 Severity under analysis added on 09/08/2022

D-Link DIR-820L Remote Code Execution Vulnerability

D-Link · DIR-820L · CWE-78

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

CVE-2020-9934 Severity under analysis added on 09/08/2022

Apple iOS, iPadOS, and macOS Input Validation Vulnerability

Apple · iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.

CVE-2018-7445 Severity under analysis added on 09/08/2022

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

MikroTik · RouterOS · CWE-119

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

CVE-2018-6530 Severity under analysis Ransomware added on 09/08/2022

D-Link Multiple Routers OS Command Injection Vulnerability

D-Link · Multiple Routers · CWE-78

Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.

CVE-2018-2628 Severity under analysis added on 09/08/2022

Oracle WebLogic Server Unspecified Vulnerability

Oracle · WebLogic Server · CWE-502

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

CVE-2018-13374 Severity under analysis Ransomware added on 09/08/2022

Fortinet FortiOS and FortiADC Improper Access Control Vulnerability

Fortinet · FortiOS and FortiADC · CWE-732

Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.

CVE-2017-5521 Severity under analysis added on 09/08/2022

NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability

NETGEAR · Multiple Devices · CWE-200

Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.

CVE-2011-4723 Severity under analysis added on 09/08/2022

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

D-Link · DIR-300 Router · CWE-310

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.

CVE-2011-1823 Severity under analysis added on 09/08/2022

Android OS Privilege Escalation Vulnerability

Android · Android OS · CWE-189

The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.

CVE-2022-26352 Severity under analysis Ransomware added on 08/25/2022

dotCMS Unrestricted Upload of File Vulnerability

dotCMS · dotCMS · CWE-22, CWE-138

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.

CVE-2022-24706 Severity under analysis added on 08/25/2022

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Apache · CouchDB · CWE-1188

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

CVE-2022-24112 Severity under analysis added on 08/25/2022

Apache APISIX Authentication Bypass Vulnerability

Apache · APISIX · CWE-290

Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.