Security Radar

CVE-2019-1064 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-0841 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2019-0543 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

CVE-2018-8120 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

CVE-2017-0101 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

CVE-2016-3309 Severity under analysis Ransomware added on 03/15/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

CVE-2015-2546 Severity under analysis Ransomware added on 03/15/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.

CVE-2022-26486 Severity under analysis added on 03/07/2022

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox · CWE-416

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

CVE-2022-26485 Severity under analysis added on 03/07/2022

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox · CWE-416

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

CVE-2021-21973 Severity under analysis added on 03/07/2022

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundation · CWE-20, CWE-918

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

CVE-2020-8218 Severity under analysis added on 03/07/2022

Pulse Connect Secure Code Injection Vulnerability

Pulse Secure · Pulse Connect Secure · CWE-94

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

CVE-2019-11581 Severity under analysis added on 03/07/2022

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Center · CWE-74

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

CVE-2017-6077 Severity under analysis added on 03/07/2022

NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR · Wireless Router DGN2200 · CWE-78

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

CVE-2016-6277 Severity under analysis added on 03/07/2022

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR · Multiple Routers · CWE-352

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

CVE-2013-0631 Severity under analysis added on 03/07/2022

Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusion · CWE-200

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

CVE-2013-0629 Severity under analysis added on 03/07/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-264

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

CVE-2013-0625 Severity under analysis added on 03/07/2022

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion · CWE-255

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.

CVE-2009-3960 Severity under analysis Ransomware added on 03/07/2022

Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDS

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.

CVE-2022-20708 Severity under analysis added on 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

CVE-2022-20703 Severity under analysis added on 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-347

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

CVE-2022-20701 Severity under analysis added on 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

CVE-2022-20700 Severity under analysis added on 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

CVE-2022-20699 Severity under analysis added on 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-785

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

CVE-2021-41379 Severity under analysis Ransomware added on 03/03/2022

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows · CWE-1386

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation.