Radar de Seguridad

CVE-2023-33107 Severidad en análisis en el catálogo el 05/12/2023

Qualcomm Multiple Chipsets Integer Overflow Vulnerability

Qualcomm · Multiple Chipsets · CWE-190

Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. EN

CVE-2023-33106 Severidad en análisis en el catálogo el 05/12/2023

Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

Qualcomm · Multiple Chipsets · CWE-823

Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. EN

CVE-2023-33063 Severidad en análisis en el catálogo el 05/12/2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets · CWE-416

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP. EN

CVE-2022-22071 Severidad en análisis en el catálogo el 05/12/2023

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Qualcomm · Multiple Chipsets · CWE-416

Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress. EN

CVE-2023-42917 Severidad en análisis en el catálogo el 04/12/2023

Apple Multiple Products WebKit Memory Corruption Vulnerability

Apple · Multiple Products · CWE-787

Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. EN

CVE-2023-42916 Severidad en análisis en el catálogo el 04/12/2023

Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

Apple · Multiple Products · CWE-125

Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing. EN

CVE-2023-6345 Severidad en análisis en el catálogo el 30/11/2023

Google Skia Integer Overflow Vulnerability

Google · Chromium Skia · CWE-190

Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products. EN

CVE-2023-49103 Severidad en análisis en el catálogo el 30/11/2023

ownCloud graphapi Information Disclosure Vulnerability

ownCloud · ownCloud graphapi

ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials. EN

CVE-2023-4911 Severidad en análisis en el catálogo el 21/11/2023

GNU C Library Buffer Overflow Vulnerability

GNU · GNU C Library · CWE-122

GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges. EN

CVE-2023-36584 Severidad en análisis en el catálogo el 16/11/2023

Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features. EN

CVE-2023-1671 Severidad en análisis en el catálogo el 16/11/2023

Sophos Web Appliance Command Injection Vulnerability

Sophos · Web Appliance · CWE-77

Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution. EN

CVE-2020-2551 Severidad en análisis en el catálogo el 16/11/2023

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server. EN

CVE-2023-36036 Severidad en análisis en el catálogo el 14/11/2023

Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-122

Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges. EN

CVE-2023-36033 Severidad en análisis en el catálogo el 14/11/2023

Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

Microsoft · Windows · CWE-822

Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2023-36025 Severidad en análisis en el catálogo el 14/11/2023

Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

Microsoft · Windows

Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts. EN

CVE-2023-47246 Severidad en análisis Ransomware en el catálogo el 13/11/2023

SysAid Server Path Traversal Vulnerability

SysAid · SysAid Server · CWE-22

SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution. EN

CVE-2023-36851 Severidad en análisis en el catálogo el 13/11/2023

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS · CWE-306

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. EN

CVE-2023-36847 Severidad en análisis en el catálogo el 13/11/2023

Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS · CWE-306

Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. EN

CVE-2023-36846 Severidad en análisis en el catálogo el 13/11/2023

Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

Juniper · Junos OS · CWE-306

Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. EN

CVE-2023-36845 Severidad en análisis en el catálogo el 13/11/2023

Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS · CWE-473

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code. EN

CVE-2023-36844 Severidad en análisis en el catálogo el 13/11/2023

Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

Juniper · Junos OS · CWE-473

Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities. EN

CVE-2023-29552 Severidad en análisis en el catálogo el 08/11/2023

Service Location Protocol (SLP) Denial-of-Service Vulnerability

IETF · Service Location Protocol (SLP)

The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor. EN

CVE-2023-22518 Severidad en análisis Ransomware en el catálogo el 07/11/2023

Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

Atlassian · Confluence Data Center and Server · CWE-863

Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data. EN

CVE-2023-46604 Severidad en análisis Ransomware en el catálogo el 02/11/2023

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

Apache · ActiveMQ · CWE-502

Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath. EN