Radar de Seguridad

CVE-2025-22225 Severidad en análisis Ransomware en el catálogo el 04/03/2025

VMware ESXi Arbitrary Write Vulnerability

VMware · ESXi · CWE-123

VMware ESXi contains an arbitrary write vulnerability. Successful exploitation allows an attacker with privileges within the VMX process to trigger an arbitrary kernel write leading to an escape of the sandbox. EN

CVE-2018-8639 Severidad en análisis Ransomware en el catálogo el 03/03/2025

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

Microsoft · Windows · CWE-404

Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. EN

CVE-2024-53704 Severidad en análisis Ransomware en el catálogo el 18/02/2025

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall · SonicOS · CWE-287

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication. EN

CVE-2025-23006 Severidad en análisis Ransomware en el catálogo el 24/01/2025

SonicWall SMA1000 Appliances Deserialization Vulnerability

SonicWall · SMA1000 Appliances · CWE-502

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands. EN

CVE-2024-55591 Severidad en análisis Ransomware en el catálogo el 14/01/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · CWE-288

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module. EN

CVE-2025-0282 Severidad en análisis Ransomware en el catálogo el 08/01/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution. EN

CVE-2024-9474 Severidad en análisis Ransomware en el catálogo el 18/11/2024

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · CWE-77

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators. EN

CVE-2024-0012 Severidad en análisis Ransomware en el catálogo el 18/11/2024

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-306

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators. EN

CVE-2024-49039 Severidad en análisis Ransomware en el catálogo el 12/11/2024

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. EN

CVE-2024-38094 Severidad en análisis Ransomware en el catálogo el 22/10/2024

Microsoft SharePoint Deserialization Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. EN

CVE-2024-40711 Severidad en análisis Ransomware en el catálogo el 17/10/2024

Veeam Backup and Replication Deserialization Vulnerability

Veeam · Backup & Replication · CWE-502

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. EN

CVE-2024-30088 Severidad en análisis Ransomware en el catálogo el 15/10/2024

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft · Windows · CWE-367

Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. EN

CVE-2020-0618 Severidad en análisis Ransomware en el catálogo el 18/09/2024

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft · SQL Server · CWE-502

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. EN

CVE-2024-6670 Severidad en análisis Ransomware en el catálogo el 16/09/2024

Progress WhatsUp Gold SQL Injection Vulnerability

Progress · WhatsUp Gold · CWE-89

Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. EN

CVE-2024-40766 Severidad en análisis Ransomware en el catálogo el 09/09/2024

SonicWall SonicOS Improper Access Control Vulnerability

SonicWall · SonicOS · CWE-284

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. EN

CVE-2017-1000253 Severidad en análisis Ransomware en el catálogo el 09/09/2024

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Linux · Kernel · CWE-119

Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. EN

CVE-2024-37085 Severidad en análisis Ransomware en el catálogo el 30/07/2024

VMware ESXi Authentication Bypass Vulnerability

VMware · ESXi · CWE-305

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. EN

CVE-2024-26169 Severidad en análisis Ransomware en el catálogo el 13/06/2024

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. EN

CVE-2024-1086 Severidad en análisis Ransomware en el catálogo el 30/05/2024

Linux Kernel Use-After-Free Vulnerability

Linux · Kernel · CWE-416

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation. EN

CVE-2024-30051 Severidad en análisis Ransomware en el catálogo el 14/05/2024

Microsoft DWM Core Library Privilege Escalation Vulnerability

Microsoft · DWM Core Library · CWE-122

Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges. EN

CVE-2024-3400 Severidad en análisis Ransomware en el catálogo el 12/04/2024

Palo Alto Networks PAN-OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · CWE-20, CWE-77

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall. EN

CVE-2023-24955 Severidad en análisis Ransomware en el catálogo el 26/03/2024

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft · SharePoint Server · CWE-94

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely. EN

CVE-2023-48788 Severidad en análisis Ransomware en el catálogo el 25/03/2024

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMS · CWE-89

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. EN

CVE-2021-44529 Severidad en análisis Ransomware en el catálogo el 25/03/2024

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) · CWE-94

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). EN