Radar de Seguridad

CVE-2021-4034 Severidad en análisis Ransomware en el catálogo el 27/06/2022

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Red Hat · Polkit · CWE-787

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights. EN

CVE-2021-30983 Severidad en análisis en el catálogo el 27/06/2022

Apple iOS and iPadOS Buffer Overflow Vulnerability

Apple · iOS and iPadOS · CWE-119

Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges. EN

CVE-2021-30533 Severidad en análisis en el catálogo el 27/06/2022

Google Chromium PopupBlocker Security Bypass Vulnerability

Google · Chromium PopupBlocker · CWE-863

Google Chromium PopupBlocker contains an insufficient policy enforcement vulnerability that allows a remote attacker to bypass navigation restrictions via a crafted iframe. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2020-9907 Severidad en análisis en el catálogo el 27/06/2022

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Products · CWE-787

Apple iOS, iPadOS, and tvOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges. EN

CVE-2020-3837 Severidad en análisis en el catálogo el 27/06/2022

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Products · CWE-787

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability that could allow an application to execute code with kernel privileges. EN

CVE-2019-8605 Severidad en análisis en el catálogo el 27/06/2022

Apple Multiple Products Use-After-Free Vulnerability

Apple · Multiple Products · CWE-416

A use-after-free vulnerability in Apple iOS, macOS, tvOS, and watchOS could allow a malicious application to execute code with system privileges. EN

CVE-2018-4344 Severidad en análisis en el catálogo el 27/06/2022

Apple Multiple Products Memory Corruption Vulnerability

Apple · Multiple Products · CWE-119

Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution. EN

CVE-2022-30190 Severidad en análisis Ransomware en el catálogo el 14/06/2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windows · CWE-610

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application. EN

CVE-2021-38163 Severidad en análisis en el catálogo el 09/06/2022

SAP NetWeaver Unrestricted File Upload Vulnerability

SAP · NetWeaver · CWE-23

SAP NetWeaver contains a vulnerability that allows unrestricted file upload. EN

CVE-2016-2388 Severidad en análisis en el catálogo el 09/06/2022

SAP NetWeaver Information Disclosure Vulnerability

SAP · NetWeaver · CWE-200

The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request. EN

CVE-2016-2386 Severidad en análisis en el catálogo el 09/06/2022

SAP NetWeaver SQL Injection Vulnerability

SAP · NetWeaver · CWE-89

SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. EN

CVE-2019-7195 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Station · CWE-22

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. EN

CVE-2019-7194 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Station · CWE-22

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. EN

CVE-2019-7193 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP QTS Improper Input Validation Vulnerability

QNAP · QTS · CWE-20

QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. EN

CVE-2019-7192 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Improper Access Control Vulnerability

QNAP · Photo Station · CWE-863

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system. EN

CVE-2019-5825 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8 · CWE-787

Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2019-15271 Severidad en análisis en el catálogo el 08/06/2022

Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Cisco · RV Series Routers · CWE-502

A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges. EN

CVE-2018-6065 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Integer Overflow Vulnerability

Google · Chromium V8 · CWE-190, CWE-787

Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2018-4990 Severidad en análisis en el catálogo el 08/06/2022

Adobe Acrobat and Reader Double Free Vulnerability

Adobe · Acrobat and Reader · CWE-415

Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. EN

CVE-2018-17480 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8 · CWE-787

Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2018-17463 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Remote Code Execution Vulnerability

Google · Chromium V8

Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2017-6862 Severidad en análisis en el catálogo el 08/06/2022

NETGEAR Multiple Devices Buffer Overflow Vulnerability

NETGEAR · Multiple Devices · CWE-119

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution. EN

CVE-2017-5070 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2017-5030 Severidad en análisis en el catálogo el 08/06/2022

Google Chromium V8 Memory Corruption Vulnerability

Google · Chromium V8 · CWE-125

Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN