Radar de Seguridad

CVE-2019-1064 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0841 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0543 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2018-8120 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. EN

CVE-2017-0101 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. EN

CVE-2016-3309 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. EN

CVE-2015-2546 Severidad en análisis Ransomware en el catálogo el 15/03/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. EN

CVE-2022-26486 Severidad en análisis en el catálogo el 07/03/2022

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox · CWE-416

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution. EN

CVE-2022-26485 Severidad en análisis en el catálogo el 07/03/2022

Mozilla Firefox Use-After-Free Vulnerability

Mozilla · Firefox · CWE-416

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution. EN

CVE-2021-21973 Severidad en análisis en el catálogo el 07/03/2022

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundation · CWE-20, CWE-918

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure. EN

CVE-2020-8218 Severidad en análisis en el catálogo el 07/03/2022

Pulse Connect Secure Code Injection Vulnerability

Pulse Secure · Pulse Connect Secure · CWE-94

A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface. EN

CVE-2019-11581 Severidad en análisis en el catálogo el 07/03/2022

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Center · CWE-74

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution. EN

CVE-2017-6077 Severidad en análisis en el catálogo el 07/03/2022

NETGEAR DGN2200 Remote Code Execution Vulnerability

NETGEAR · Wireless Router DGN2200 · CWE-78

NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution. EN

CVE-2016-6277 Severidad en análisis en el catálogo el 07/03/2022

NETGEAR Multiple Routers Remote Code Execution Vulnerability

NETGEAR · Multiple Routers · CWE-352

NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution. EN

CVE-2013-0631 Severidad en análisis en el catálogo el 07/03/2022

Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusion · CWE-200

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. EN

CVE-2013-0629 Severidad en análisis en el catálogo el 07/03/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-264

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. EN

CVE-2013-0625 Severidad en análisis en el catálogo el 07/03/2022

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion · CWE-255

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. EN

CVE-2009-3960 Severidad en análisis Ransomware en el catálogo el 07/03/2022

Adobe BlazeDS Information Disclosure Vulnerability

Adobe · BlazeDS

Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure. EN

CVE-2022-20708 Severidad en análisis en el catálogo el 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). EN

CVE-2022-20703 Severidad en análisis en el catálogo el 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-347

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). EN

CVE-2022-20701 Severidad en análisis en el catálogo el 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). EN

CVE-2022-20700 Severidad en análisis en el catálogo el 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-121

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). EN

CVE-2022-20699 Severidad en análisis en el catálogo el 03/03/2022

Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Cisco · Small Business RV160, RV260, RV340, and RV345 Series Routers · CWE-785

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS). EN

CVE-2021-41379 Severidad en análisis Ransomware en el catálogo el 03/03/2022

Microsoft Windows Installer Privilege Escalation Vulnerability

Microsoft · Windows · CWE-1386

Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation. EN