Radar de Seguridad

CVE-2018-8639 Severidad en análisis Ransomware en el catálogo el 03/03/2025

Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

Microsoft · Windows · CWE-404

Microsoft Windows Win32k contains an improper resource shutdown or release vulnerability that allows for local, authenticated privilege escalation. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. EN

CVE-2024-53704 Severidad en análisis Ransomware en el catálogo el 18/02/2025

SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

SonicWall · SonicOS · CWE-287

SonicWall SonicOS contains an improper authentication vulnerability in the SSLVPN authentication mechanism that allows a remote attacker to bypass authentication. EN

CVE-2024-57727 Severidad en análisis Ransomware en el catálogo el 13/02/2025

SimpleHelp Path Traversal Vulnerability

SimpleHelp · SimpleHelp · CWE-22

SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files may include server configuration files and hashed user passwords. EN

CVE-2020-29574 Severidad en análisis Ransomware en el catálogo el 06/02/2025

CyberoamOS (CROS) SQL Injection Vulnerability

Sophos · CyberoamOS · CWE-89

CyberoamOS (CROS) contains a SQL injection vulnerability in the WebAdmin that allows an unauthenticated attacker to execute arbitrary SQL statements remotely. EN

CVE-2025-23006 Severidad en análisis Ransomware en el catálogo el 24/01/2025

SonicWall SMA1000 Appliances Deserialization Vulnerability

SonicWall · SMA1000 Appliances · CWE-502

SonicWall SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC) contain a deserialization of untrusted data vulnerability, which can enable a remote, unauthenticated attacker to execute arbitrary OS commands. EN

CVE-2024-55591 Severidad en análisis Ransomware en el catálogo el 14/01/2025

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

Fortinet · FortiOS and FortiProxy · CWE-288

Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module. EN

CVE-2023-48365 Severidad en análisis Ransomware en el catálogo el 13/01/2025

Qlik Sense HTTP Tunneling Vulnerability

Qlik · Sense · CWE-444

Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. EN

CVE-2025-0282 Severidad en análisis Ransomware en el catálogo el 08/01/2025

Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

Ivanti · Connect Secure, Policy Secure, and ZTA Gateways · CWE-121

Ivanti Connect Secure, Policy Secure, and ZTA Gateways contain a stack-based buffer overflow which can lead to unauthenticated remote code execution. EN

CVE-2024-55550 Severidad en análisis Ransomware en el catálogo el 07/01/2025

Mitel MiCollab Path Traversal Vulnerability

Mitel · MiCollab · CWE-22

Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server. EN

CVE-2024-41713 Severidad en análisis Ransomware en el catálogo el 07/01/2025

Mitel MiCollab Path Traversal Vulnerability

Mitel · MiCollab · CWE-22

Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthorized and unauthenticated access. This vulnerability can be chained with CVE-2024-55550, which allows an unauthenticated, remote attacker to read arbitrary files on the server. EN

CVE-2024-55956 Severidad en análisis Ransomware en el catálogo el 17/12/2024

Cleo Multiple Products Unauthenticated File Upload Vulnerability

Cleo · Multiple Products · CWE-276

Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload vulnerability that could allow an unauthenticated user to import and execute arbitrary bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory. EN

CVE-2024-50623 Severidad en análisis Ransomware en el catálogo el 13/12/2024

Cleo Multiple Products Unrestricted File Upload Vulnerability

Cleo · Multiple Products · CWE-434

Cleo Harmony, VLTrader, and LexiCom, which are managed file transfer products, contain an unrestricted file upload and download vulnerability that can lead to remote code execution with elevated privileges. EN

CVE-2024-51378 Severidad en análisis Ransomware en el catálogo el 04/12/2024

CyberPanel Incorrect Default Permissions Vulnerability

CyberPersons · CyberPanel · CWE-276

CyberPanel contains an incorrect default permissions vulnerability that allows for authentication bypass and the execution of arbitrary commands using shell metacharacters in the statusfile property. EN

CVE-2024-11667 Severidad en análisis Ransomware en el catálogo el 03/12/2024

Zyxel Multiple Firewalls Path Traversal Vulnerability

Zyxel · Multiple Firewalls · CWE-22

Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that could allow an attacker to download or upload files via a crafted URL. EN

CVE-2023-28461 Severidad en análisis Ransomware en el catálogo el 25/11/2024

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks · AG/vxAG ArrayOS · CWE-306

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway. EN

CVE-2024-9474 Severidad en análisis Ransomware en el catálogo el 18/11/2024

Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · CWE-77

Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators. EN

CVE-2024-0012 Severidad en análisis Ransomware en el catálogo el 18/11/2024

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Palo Alto Networks · PAN-OS · CWE-306

Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators. EN

CVE-2024-49039 Severidad en análisis Ransomware en el catálogo el 12/11/2024

Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. EN

CVE-2024-51567 Severidad en análisis Ransomware en el catálogo el 07/11/2024

CyberPanel Incorrect Default Permissions Vulnerability

CyberPersons · CyberPanel · CWE-276

CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root. EN

CVE-2024-38094 Severidad en análisis Ransomware en el catálogo el 22/10/2024

Microsoft SharePoint Deserialization Vulnerability

Microsoft · SharePoint · CWE-502

Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. EN

CVE-2024-40711 Severidad en análisis Ransomware en el catálogo el 17/10/2024

Veeam Backup and Replication Deserialization Vulnerability

Veeam · Backup & Replication · CWE-502

Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. EN

CVE-2024-9680 Severidad en análisis Ransomware en el catálogo el 15/10/2024

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox · CWE-416

Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process. EN

CVE-2024-30088 Severidad en análisis Ransomware en el catálogo el 15/10/2024

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft · Windows · CWE-367

Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. EN

CVE-2020-0618 Severidad en análisis Ransomware en el catálogo el 18/09/2024

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Microsoft · SQL Server · CWE-502

Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account. EN