Security Radar

CVE-2018-7841 Severity under analysis added on 04/15/2022

Schneider Electric U.motion Builder SQL Injection Vulnerability

Schneider Electric · U.motion Builder · CWE-89

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered.

CVE-2016-4523 Severity under analysis added on 04/15/2022

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Trihedral · VTScada (formerly VTS) · CWE-119

The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS).

CVE-2014-0780 Severity under analysis added on 04/15/2022

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

InduSoft · Web Studio · CWE-22

InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution.

CVE-2010-5330 Severity under analysis added on 04/15/2022

Ubiquiti AirOS Command Injection Vulnerability

Ubiquiti · AirOS · CWE-77

Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi.

CVE-2007-3010 Severity under analysis added on 04/15/2022

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Alcatel · OmniPCX Enterprise · CWE-20

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.

CVE-2022-22954 Severity under analysis Ransomware added on 04/14/2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager · CWE-94

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

CVE-2022-24521 Severity under analysis Ransomware added on 04/13/2022

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-787, CWE-1285

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2018-7602 Severity under analysis Ransomware added on 04/13/2022

Drupal Core Remote Code Execution Vulnerability

Drupal · Core

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.

CVE-2018-20753 Severity under analysis Ransomware added on 04/13/2022

Kaseya VSA Remote Code Execution Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.

CVE-2015-5123 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

CVE-2015-5122 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).

CVE-2015-3113 Severity under analysis added on 04/13/2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player · CWE-119

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2015-2502 Severity under analysis added on 04/13/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS).

CVE-2015-0313 Severity under analysis added on 04/13/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2015-0311 Severity under analysis added on 04/13/2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code.

CVE-2014-9163 Severity under analysis added on 04/13/2022

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely.

CVE-2022-23176 Severity under analysis added on 04/11/2022

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

WatchGuard · Firebox and XTM

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.

CVE-2021-42287 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-42278 Severity under analysis Ransomware added on 04/11/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-39793 Severity under analysis added on 04/11/2022

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixel · CWE-787

Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege.

CVE-2021-27852 Severity under analysis added on 04/11/2022

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Checkbox · Checkbox Survey · CWE-502

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code.

CVE-2021-22600 Severity under analysis added on 04/11/2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel · CWE-415

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation.

CVE-2020-2509 Severity under analysis added on 04/11/2022

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

QNAP · QNAP Network-Attached Storage (NAS) · CWE-77, CWE-78

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.

CVE-2017-11317 Severity under analysis added on 04/11/2022

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAX · CWE-326

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.