Security Radar

CVE-2023-36884 Severity under analysis Ransomware added on 07/17/2023

Microsoft Windows Search Remote Code Execution Vulnerability

Microsoft · Windows · CWE-362

Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code execution.

CVE-2022-31199 Severity under analysis Ransomware added on 07/11/2023

Netwrix Auditor Insecure Object Deserialization Vulnerability

Netwrix · Auditor · CWE-502, CWE-122

Netwrix Auditor User Activity Video Recording component contains an insecure objection deserialization vulnerability that allows an unauthenticated, remote attacker to execute code as the NT AUTHORITY\SYSTEM user. Successful exploitation requires that the attacker is able to reach port 9004/TCP, which is commonly blocked by standard enterprise firewalling.

CVE-2023-27997 Severity under analysis Ransomware added on 06/13/2023

Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

Fortinet · FortiOS and FortiProxy SSL-VPN · CWE-122

Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.

CVE-2023-34362 Severity under analysis Ransomware added on 06/02/2023

Progress MOVEit Transfer SQL Injection Vulnerability

Progress · MOVEit Transfer · CWE-89

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.

CVE-2021-45046 Severity under analysis Ransomware added on 05/01/2023

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

Apache · Log4j2 · CWE-917

Apache Log4j2 contains a deserialization of untrusted data vulnerability due to the incomplete fix of CVE-2021-44228, where the Thread Context Lookup Pattern is vulnerable to remote code execution in certain non-default configurations.

CVE-2023-27350 Severity under analysis Ransomware added on 04/21/2023

PaperCut MF/NG Improper Access Control Vulnerability

PaperCut · MF/NG · CWE-284

PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.

CVE-2023-28252 Severity under analysis Ransomware added on 04/11/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-122

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2021-27878 Severity under analysis Ransomware added on 04/07/2023

Veritas Backup Exec Agent Command Execution Vulnerability

Veritas · Backup Exec Agent · CWE-287

Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

CVE-2021-27877 Severity under analysis Ransomware added on 04/07/2023

Veritas Backup Exec Agent Improper Authentication Vulnerability

Veritas · Backup Exec Agent · CWE-287

Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

CVE-2021-27876 Severity under analysis Ransomware added on 04/07/2023

Veritas Backup Exec Agent File Access Vulnerability

Veritas · Backup Exec Agent · CWE-287

Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.

CVE-2019-1388 Severity under analysis Ransomware added on 04/07/2023

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.

CVE-2017-7494 Severity under analysis Ransomware added on 03/30/2023

Samba Remote Code Execution Vulnerability

Samba · Samba · CWE-94

Samba contains a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share and then cause the server to load and execute it.

CVE-2023-24880 Severity under analysis Ransomware added on 03/14/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows · CWE-863

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.

CVE-2022-36537 Severity under analysis Ransomware added on 02/27/2023

ZK Framework AuUploader Unspecified Vulnerability

ZK Framework · AuUploader · CWE-441

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to ConnectWise R1Soft Server Backup Manager.

CVE-2022-47986 Severity under analysis Ransomware added on 02/21/2023

IBM Aspera Faspex Code Execution Vulnerability

IBM · Aspera Faspex · CWE-502

IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.

CVE-2022-41223 Severity under analysis Ransomware added on 02/21/2023

Mitel MiVoice Connect Code Injection Vulnerability

Mitel · MiVoice Connect · CWE-94

The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application.

CVE-2022-40765 Severity under analysis Ransomware added on 02/21/2023

Mitel MiVoice Connect Command Injection Vulnerability

Mitel · MiVoice Connect · CWE-77

The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system.

CVE-2023-23376 Severity under analysis Ransomware added on 02/14/2023

Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-122

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

CVE-2023-0669 Severity under analysis Ransomware added on 02/10/2023

Fortra GoAnywhere MFT Remote Code Execution Vulnerability

Fortra · GoAnywhere MFT · CWE-502

Fortra (formerly, HelpSystems) GoAnywhere MFT contains a pre-authentication remote code execution vulnerability in the License Response Servlet due to deserializing an attacker-controlled object.

CVE-2022-24990 Severity under analysis Ransomware added on 02/10/2023

TerraMaster OS Remote Command Execution Vulnerability

TerraMaster · TerraMaster OS · CWE-306

TerraMaster OS contains a remote command execution vulnerability that allows an unauthenticated user to execute commands on the target endpoint.

CVE-2015-2291 Severity under analysis Ransomware added on 02/10/2023

Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

Intel · Ethernet Diagnostics Driver for Windows · CWE-20

Intel ethernet diagnostics driver for Windows IQVW32.sys and IQVW64.sys contain an unspecified vulnerability that allows for a denial-of-service (DoS).

CVE-2022-21587 Severity under analysis Ransomware added on 02/02/2023

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite · CWE-306

Oracle E-Business Suite contains an unspecified vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator.

CVE-2017-11357 Severity under analysis Ransomware added on 01/26/2023

Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAX · CWE-20

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

CVE-2022-47966 Severity under analysis Ransomware added on 01/23/2023

Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

Zoho · ManageEngine

Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.