Radar de Seguridad

CVE-2015-5123 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). EN

CVE-2015-5122 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). EN

CVE-2015-3113 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player · CWE-119

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2015-2502 Severidad en análisis en el catálogo el 13/04/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS). EN

CVE-2015-0313 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2015-0311 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2014-9163 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. EN

CVE-2021-42287 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-42278 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-39793 Severidad en análisis en el catálogo el 11/04/2022

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixel · CWE-787

Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. EN

CVE-2021-22600 Severidad en análisis en el catálogo el 11/04/2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel · CWE-415

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation. EN

CVE-2021-31166 Severidad en análisis en el catálogo el 06/04/2022

Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability

Microsoft · HTTP Protocol Stack · CWE-416

Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution. EN

CVE-2017-0148 Severidad en análisis Ransomware en el catálogo el 06/04/2022

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 server · CWE-20

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets. EN

CVE-2022-22965 Severidad en análisis en el catálogo el 04/04/2022

Spring Framework JDK 9+ Remote Code Execution Vulnerability

VMware · Spring Framework · CWE-94

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. EN

CVE-2021-34484 Severidad en análisis en el catálogo el 31/03/2022

Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2022-1096 Severidad en análisis en el catálogo el 28/03/2022

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-38646 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution. EN

CVE-2021-34486 Severidad en análisis en el catálogo el 28/03/2022

Microsoft Windows Event Tracing Privilege Escalation Vulnerability

Microsoft · Windows · CWE-416

Microsoft Windows Event Tracing contains an unspecified vulnerability which can allow for privilege escalation. EN

CVE-2021-26085 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server · CWE-425

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint. EN

CVE-2021-20028 Severidad en análisis Ransomware en el catálogo el 28/03/2022

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA) · CWE-89

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection. EN

CVE-2019-7483 Severidad en análisis en el catálogo el 28/03/2022

SonicWall SMA100 Directory Traversal Vulnerability

SonicWall · SMA100 · CWE-22

In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server. EN

CVE-2018-8440 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). EN

CVE-2018-8406 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. EN

CVE-2018-8405 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. EN