Radar de Seguridad

CVE-2025-33073 Severidad en análisis en el catálogo el 20/10/2025

Microsoft Windows SMB Client Improper Access Control Vulnerability

Microsoft · Windows · CWE-284

Microsoft Windows SMB Client contains an improper access control vulnerability that could allow for privilege escalation. An attacker could execute a specially crafted malicious script to coerce the victim machine to connect back to the attack system using SMB and authenticate. EN

CVE-2025-54253 Severidad en análisis en el catálogo el 15/10/2025

Adobe Experience Manager Forms Code Execution Vulnerability

Adobe · Experience Manager (AEM) Forms

Adobe Experience Manager Forms in JEE contains an unspecified vulnerability that allows for arbitrary code execution. EN

CVE-2025-59230 Severidad en análisis en el catálogo el 14/10/2025

Microsoft Windows Improper Access Control Vulnerability

Microsoft · Windows · CWE-284

Microsoft Windows contains an improper access control vulnerability in Windows Remote Access Connection Manager which could allow an authorized attacker to elevate privileges locally. EN

CVE-2025-24990 Severidad en análisis en el catálogo el 14/10/2025

Microsoft Windows Untrusted Pointer Dereference Vulnerability

Microsoft · Windows · CWE-822

Microsoft Windows Agere Modem Driver contains an untrusted pointer dereference vulnerability that allows for privilege escalation. An attacker who successfully exploited this vulnerability could gain administrator privileges. EN

CVE-2025-61882 Severidad en análisis Ransomware en el catálogo el 06/10/2025

Oracle E-Business Suite Unspecified Vulnerability

Oracle · E-Business Suite

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing. EN

CVE-2021-43226 Severidad en análisis Ransomware en el catálogo el 06/10/2025

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms. EN

CVE-2021-22555 Severidad en análisis en el catálogo el 06/10/2025

Linux Kernel Heap Out-of-Bounds Write Vulnerability

Linux · Kernel · CWE-787

Linux Kernel contains a heap out-of-bounds write vulnerability that could allow an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space. EN

CVE-2013-3918 Severidad en análisis en el catálogo el 06/10/2025

Microsoft Windows Out-of-Bounds Write Vulnerability

Microsoft · Windows

Microsoft Windows contains an out-of-bounds write vulnerability in the InformationCardSigninHelper Class ActiveX control, icardie.dll. An attacker could exploit the vulnerability by constructing a specially crafted webpage. When a user views the webpage, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. EN

CVE-2011-3402 Severidad en análisis en el catálogo el 06/10/2025

Microsoft Windows Remote Code Execution Vulnerability

Microsoft · Windows

Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page. EN

CVE-2010-3962 Severidad en análisis en el catálogo el 06/10/2025

Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

Microsoft · Internet Explorer

Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. EN

CVE-2015-7755 Severidad en análisis en el catálogo el 02/10/2025

Juniper ScreenOS Improper Authentication Vulnerability

Juniper · ScreenOS · CWE-287

Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device. EN

CVE-2025-20352 Severidad en análisis en el catálogo el 29/09/2025

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Cisco · IOS and IOS XE · CWE-121

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. EN

CVE-2025-20362 Severidad en análisis en el catálogo el 25/09/2025

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense · CWE-862

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333. EN

CVE-2025-20333 Severidad en análisis en el catálogo el 25/09/2025

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco · Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense · CWE-120

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362. EN

CVE-2025-10585 Severidad en análisis en el catálogo el 23/09/2025

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-843

Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine. EN

CVE-2025-38352 Severidad en análisis en el catálogo el 04/09/2025

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

Linux · Kernel · CWE-367

Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability. EN

CVE-2025-7775 Severidad en análisis en el catálogo el 26/08/2025

Citrix NetScaler Memory Overflow Vulnerability

Citrix · NetScaler · CWE-119

Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service. EN

CVE-2024-8069 Severidad en análisis en el catálogo el 25/08/2025

Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Citrix · Session Recording · CWE-502

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server. EN

CVE-2024-8068 Severidad en análisis en el catálogo el 25/08/2025

Citrix Session Recording Improper Privilege Management Vulnerability

Citrix · Session Recording · CWE-269

Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain. EN

CVE-2013-3893 Severidad en análisis en el catálogo el 12/08/2025

Microsoft Internet Explorer Resource Management Errors Vulnerability

Microsoft · Internet Explorer · CWE-399

Microsoft Internet Explorer contains a memory corruption vulnerability that allows for remote code execution. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. EN

CVE-2007-0671 Severidad en análisis en el catálogo el 12/08/2025

Microsoft Office Excel Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office Excel contains a remote code execution vulnerability that can be exploited when a specially crafted Excel file is opened. This malicious file could be delivered as an email attachment or hosted on a malicious website. An attacker could leverage this vulnerability by creating a specially crafted Excel file, which, when opened, allowing an attacker to execute remote code on the affected system. EN

CVE-2025-20337 Severidad en análisis en el catálogo el 28/07/2025

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine · CWE-74

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device. EN

CVE-2025-20281 Severidad en análisis en el catálogo el 28/07/2025

Cisco Identity Services Engine Injection Vulnerability

Cisco · Identity Services Engine · CWE-74

Cisco Identity Services Engine contains an injection vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC due to insufficient validation of user-supplied input allowing an attacker to exploit this vulnerability by submitting a crafted API request. Successful exploitation could allow an attacker to perform remote code execution and obtaining root privileges on an affected device. EN

CVE-2025-6558 Severidad en análisis en el catálogo el 22/07/2025

Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

Google · Chromium · CWE-20

Google Chromium contains an improper input validation vulnerability in ANGLE and GPU. This vulnerability could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN