Radar de Seguridad

CVE-2016-0151 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

Microsoft · Client-Server Run-time Subsystem (CSRSS) · CWE-264

The Client-Server Run-time Subsystem (CSRSS) in Microsoft mismanages process tokens, which allows local users to gain privileges via a crafted application. EN

CVE-2013-2551 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · CWE-416

Use-after-free vulnerability in Microsoft Internet Explorer allows remote attackers to execute remote code via a crafted web site that triggers access to a deleted object. EN

CVE-2013-2465 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Oracle Java SE Unspecified Vulnerability

Oracle · Java SE

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D EN

CVE-2022-21999 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Microsoft · Windows · CWE-40, CWE-1386

Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation. EN

CVE-2021-22941 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Citrix ShareFile Improper Access Control Vulnerability

Citrix · ShareFile · CWE-284

Improper Access Control in Citrix ShareFile storage zones controller may allow an unauthenticated attacker to remotely compromise the storage zones controller. EN

CVE-2020-2021 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-347

Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. EN

CVE-2019-11043 Severidad en análisis Ransomware en el catálogo el 25/03/2022

PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability

PHP · FastCGI Process Manager (FPM) · CWE-120

In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution. EN

CVE-2017-12615 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Apache Tomcat on Windows Remote Code Execution Vulnerability

Apache · Tomcat · CWE-434

When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server. EN

CVE-2017-0146 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Microsoft Windows SMB Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution. EN

CVE-2010-2861 Severidad en análisis Ransomware en el catálogo el 25/03/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-22

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files. EN

CVE-2020-5135 Severidad en análisis Ransomware en el catálogo el 15/03/2022

SonicWall SonicOS Buffer Overflow Vulnerability

SonicWall · SonicOS · CWE-120

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. EN

CVE-2019-1405 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation. EN

CVE-2019-1322 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-1315 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. EN

CVE-2019-1253 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions. EN

CVE-2019-1129 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-1069 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Scheduler · CWE-59

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations. EN

CVE-2019-1064 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0841 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0543 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2018-8120 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. EN

CVE-2017-0101 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. EN

CVE-2016-3309 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. EN

CVE-2015-2546 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. EN