Radar de Seguridad

CVE-2022-27925 Severidad en análisis Ransomware en el catálogo el 11/08/2022

Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-22

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution. EN

CVE-2022-30333 Severidad en análisis Ransomware en el catálogo el 09/08/2022

RARLAB UnRAR Directory Traversal Vulnerability

RARLAB · UnRAR · CWE-22, CWE-59

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation. EN

CVE-2022-27924 Severidad en análisis Ransomware en el catálogo el 04/08/2022

Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-93

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries. EN

CVE-2022-29499 Severidad en análisis Ransomware en el catálogo el 27/06/2022

Mitel MiVoice Connect Data Validation Vulnerability

Mitel · MiVoice Connect · CWE-20

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation. EN

CVE-2021-4034 Severidad en análisis Ransomware en el catálogo el 27/06/2022

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Red Hat · Polkit · CWE-787

The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights. EN

CVE-2022-30190 Severidad en análisis Ransomware en el catálogo el 14/06/2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Microsoft · Windows · CWE-610

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application. EN

CVE-2019-7195 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Station · CWE-22

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. EN

CVE-2019-7194 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Station · CWE-22

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. EN

CVE-2019-7193 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP QTS Improper Input Validation Vulnerability

QNAP · QTS · CWE-20

QNAP QTS contains an improper input validation vulnerability allowing remote attackers to inject code on the system. EN

CVE-2019-7192 Severidad en análisis Ransomware en el catálogo el 08/06/2022

QNAP Photo Station Improper Access Control Vulnerability

QNAP · Photo Station · CWE-863

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system. EN

CVE-2022-26134 Severidad en análisis Ransomware en el catálogo el 02/06/2022

Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Atlassian · Confluence Server/Data Center · CWE-917

Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution. EN

CVE-2016-0034 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Microsoft Silverlight Runtime Remote Code Execution Vulnerability

Microsoft · Silverlight · CWE-20

Microsoft Silverlight mishandles negative offsets during decoding, which allows attackers to execute remote code or cause a denial-of-service (DoS). EN

CVE-2013-3993 Severidad en análisis Ransomware en el catálogo el 25/05/2022

IBM InfoSphere BigInsights Invalid Input Vulnerability

IBM · InfoSphere BigInsights · CWE-264

Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data. EN

CVE-2013-0431 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Oracle JRE Sandbox Bypass Vulnerability

Oracle · Java Runtime Environment (JRE)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox. EN

CVE-2013-0422 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Oracle JRE Remote Code Execution Vulnerability

Oracle · Java Runtime Environment (JRE) · CWE-264

A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system. EN

CVE-2013-0074 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Microsoft Silverlight Double Dereference Vulnerability

Microsoft · Silverlight

Microsoft Silverlight does not properly validate pointers during HTML object rendering, which allows remote attackers to execute code via a crafted Silverlight application. EN

CVE-2012-1710 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Oracle Fusion Middleware Unspecified Vulnerability

Oracle · Fusion Middleware

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Designer. EN

CVE-2010-1428 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Red Hat JBoss Information Disclosure Vulnerability

Red Hat · JBoss · CWE-264

Unauthenticated access to the JBoss Application Server Web Console (/web-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information. EN

CVE-2010-0738 Severidad en análisis Ransomware en el catálogo el 25/05/2022

Red Hat JBoss Authentication Bypass Vulnerability

Red Hat · JBoss · CWE-264

The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method. EN

CVE-2018-19953 Severidad en análisis Ransomware en el catálogo el 24/05/2022

QNAP NAS File Station Cross-Site Scripting Vulnerability

QNAP · Network Attached Storage (NAS) · CWE-79, CWE-80

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. EN

CVE-2018-19949 Severidad en análisis Ransomware en el catálogo el 24/05/2022

QNAP NAS File Station Command Injection Vulnerability

QNAP · Network Attached Storage (NAS) · CWE-20, CWE-77, CWE-78

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands. EN

CVE-2018-19943 Severidad en análisis Ransomware en el catálogo el 24/05/2022

QNAP NAS File Station Cross-Site Scripting Vulnerability

QNAP · Network Attached Storage (NAS) · CWE-79, CWE-80

A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code. EN

CVE-2017-18362 Severidad en análisis Ransomware en el catálogo el 24/05/2022

Kaseya VSA SQL Injection Vulnerability

Kaseya · Virtual System/Server Administrator (VSA) · CWE-89

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. EN

CVE-2017-0147 Severidad en análisis Ransomware en el catálogo el 24/05/2022

Microsoft Windows SMBv1 Information Disclosure Vulnerability

Microsoft · SMBv1 server · CWE-200

The SMBv1 server in Microsoft Windows allows remote attackers to obtain sensitive information from process memory via a crafted packet. EN