Radar de Seguridad

CVE-2018-7841 Severidad en análisis en el catálogo el 15/04/2022

Schneider Electric U.motion Builder SQL Injection Vulnerability

Schneider Electric · U.motion Builder · CWE-89

A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered. EN

CVE-2016-4523 Severidad en análisis en el catálogo el 15/04/2022

Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability

Trihedral · VTScada (formerly VTS) · CWE-119

The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS). EN

CVE-2014-0780 Severidad en análisis en el catálogo el 15/04/2022

InduSoft Web Studio NTWebServer Directory Traversal Vulnerability

InduSoft · Web Studio · CWE-22

InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution. EN

CVE-2010-5330 Severidad en análisis en el catálogo el 15/04/2022

Ubiquiti AirOS Command Injection Vulnerability

Ubiquiti · AirOS · CWE-77

Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi. EN

CVE-2007-3010 Severidad en análisis en el catálogo el 15/04/2022

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Alcatel · OmniPCX Enterprise · CWE-20

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands. EN

CVE-2022-22954 Severidad en análisis Ransomware en el catálogo el 14/04/2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager · CWE-94

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. EN

CVE-2022-24521 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-787, CWE-1285

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2018-7602 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Drupal Core Remote Code Execution Vulnerability

Drupal · Core

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site. EN

CVE-2018-20753 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Kaseya VSA Remote Code Execution Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. EN

CVE-2015-5123 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). EN

CVE-2015-5122 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS). EN

CVE-2015-3113 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Adobe · Flash Player · CWE-119

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2015-2502 Severidad en análisis en el catálogo el 13/04/2022

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-119

Microsoft Internet Explorer contains a memory corruption vulnerability that allows an attacker to execute code or cause a denial-of-service (DoS). EN

CVE-2015-0313 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2015-0311 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Remote Code Execution Vulnerability

Adobe · Flash Player

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute code. EN

CVE-2014-9163 Severidad en análisis en el catálogo el 13/04/2022

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Adobe · Flash Player

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely. EN

CVE-2022-23176 Severidad en análisis en el catálogo el 11/04/2022

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

WatchGuard · Firebox and XTM

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. EN

CVE-2021-42287 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-42278 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-39793 Severidad en análisis en el catálogo el 11/04/2022

Google Pixel Out-of-Bounds Write Vulnerability

Google · Pixel · CWE-787

Google Pixel contains a possible out-of-bounds write due to a logic error in the code that could lead to local escalation of privilege. EN

CVE-2021-27852 Severidad en análisis en el catálogo el 11/04/2022

Checkbox Survey Deserialization of Untrusted Data Vulnerability

Checkbox · Checkbox Survey · CWE-502

Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an unauthenticated remote attacker to execute arbitrary code. EN

CVE-2021-22600 Severidad en análisis en el catálogo el 11/04/2022

Linux Kernel Privilege Escalation Vulnerability

Linux · Kernel · CWE-415

Linux Kernel contains a flaw in the packet socket (AF_PACKET) implementation which could lead to incorrectly freeing memory. A local user could exploit this for denial-of-service (DoS) or possibly for privilege escalation. EN

CVE-2020-2509 Severidad en análisis en el catálogo el 11/04/2022

QNAP Network-Attached Storage (NAS) Command Injection Vulnerability

QNAP · QNAP Network-Attached Storage (NAS) · CWE-77, CWE-78

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution. EN

CVE-2017-11317 Severidad en análisis en el catálogo el 11/04/2022

Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

Telerik · User Interface (UI) for ASP.NET AJAX · CWE-326

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code. EN