Radar de Seguridad

CVE-2022-22963 Severidad en análisis en el catálogo el 25/08/2022

VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

VMware Tanzu · Spring Cloud · CWE-94

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources. EN

CVE-2022-2294 Severidad en análisis Ransomware en el catálogo el 25/08/2022

WebRTC Heap Buffer Overflow Vulnerability

WebRTC · WebRTC · CWE-122

WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome. EN

CVE-2021-39226 Severidad en análisis en el catálogo el 25/08/2022

Grafana Authentication Bypass Vulnerability

Grafana Labs · Grafana · CWE-287

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss. EN

CVE-2021-38406 Severidad en análisis en el catálogo el 25/08/2022

Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability

Delta Electronics · DOPSoft 2 · CWE-787

Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution. EN

CVE-2021-31010 Severidad en análisis en el catálogo el 25/08/2022

Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability

Apple · iOS, macOS, watchOS · CWE-20, CWE-502

In affected versions of Apple iOS, macOS, and watchOS, a sandboxed process may be able to circumvent sandbox restrictions. EN

CVE-2020-36193 Severidad en análisis en el catálogo el 25/08/2022

PEAR Archive_Tar Improper Link Resolution Vulnerability

PEAR · Archive_Tar · CWE-22, CWE-59

PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. EN

CVE-2020-28949 Severidad en análisis en el catálogo el 25/08/2022

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

PEAR · Archive_Tar · CWE-74

PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux. EN

CVE-2022-0028 Severidad en análisis en el catálogo el 22/08/2022

Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Palo Alto Networks · PAN-OS · CWE-940

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. EN

CVE-2022-32894 Severidad en análisis en el catálogo el 18/08/2022

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple · iOS and macOS · CWE-20, CWE-787

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges. EN

CVE-2022-32893 Severidad en análisis en el catálogo el 18/08/2022

Apple iOS and macOS Out-of-Bounds Write Vulnerability

Apple · iOS and macOS · CWE-20, CWE-787

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content. EN

CVE-2022-2856 Severidad en análisis en el catálogo el 18/08/2022

Google Chromium Intents Insufficient Input Validation Vulnerability

Google · Chromium Intents · CWE-20

Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2022-26923 Severidad en análisis en el catálogo el 18/08/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-295

An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM. EN

CVE-2022-22536 Severidad en análisis en el catálogo el 18/08/2022

SAP Multiple Products HTTP Request Smuggling Vulnerability

SAP · Multiple Products · CWE-444

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches. EN

CVE-2022-21971 Severidad en análisis en el catálogo el 18/08/2022

Microsoft Windows Runtime Remote Code Execution Vulnerability

Microsoft · Windows · CWE-824

Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution. EN

CVE-2017-15944 Severidad en análisis en el catálogo el 18/08/2022

Palo Alto Networks PAN-OS Remote Code Execution Vulnerability

Palo Alto Networks · PAN-OS

Palo Alto Networks PAN-OS contains multiple, unspecified vulnerabilities which can allow for remote code execution when chained. EN

CVE-2022-37042 Severidad en análisis Ransomware en el catálogo el 11/08/2022

Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-23

Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution. EN

CVE-2022-27925 Severidad en análisis Ransomware en el catálogo el 11/08/2022

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-22

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution. EN

CVE-2022-34713 Severidad en análisis en el catálogo el 09/08/2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windows

A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application. EN

CVE-2022-30333 Severidad en análisis Ransomware en el catálogo el 09/08/2022

RARLAB UnRAR Directory Traversal Vulnerability

RARLAB · UnRAR · CWE-22, CWE-59

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation. EN

CVE-2022-27924 Severidad en análisis Ransomware en el catálogo el 04/08/2022

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-93

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries. EN

CVE-2022-26138 Severidad en análisis en el catálogo el 29/07/2022

Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

Atlassian · Confluence · CWE-798

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group. EN

CVE-2022-22047 Severidad en análisis en el catálogo el 12/07/2022

Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-426

Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges. EN

CVE-2022-26925 Severidad en análisis en el catálogo el 01/07/2022

Microsoft Windows LSA Spoofing Vulnerability

Microsoft · Windows · CWE-306

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM. EN

CVE-2022-29499 Severidad en análisis Ransomware en el catálogo el 27/06/2022

Mitel MiVoice Connect Data Validation Vulnerability

Mitel · MiVoice Connect · CWE-20

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. EN