Radar de Seguridad

CVE-2016-3351 Severidad en análisis Ransomware en el catálogo el 24/05/2022

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability

Microsoft · Internet Explorer and Edge · CWE-200

An information disclosure vulnerability exists in the way that certain functions in Internet Explorer and Edge handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer. EN

CVE-2020-0638 Severidad en análisis Ransomware en el catálogo el 23/05/2022

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Microsoft · Update Notification Manager

Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2019-1385 Severidad en análisis Ransomware en el catálogo el 23/05/2022

Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. EN

CVE-2019-1130 Severidad en análisis Ransomware en el catálogo el 23/05/2022

Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. EN

CVE-2022-1388 Severidad en análisis Ransomware en el catálogo el 10/05/2022

F5 BIG-IP Missing Authentication Vulnerability

F5 · BIG-IP · CWE-306

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services. EN

CVE-2022-29464 Severidad en análisis Ransomware en el catálogo el 25/04/2022

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

WSO2 · Multiple Products · CWE-22

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution. EN

CVE-2018-6882 Severidad en análisis Ransomware en el catálogo el 19/04/2022

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor · Zimbra Collaboration Suite (ZCS) · CWE-79

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability that might allow remote attackers to inject arbitrary web script or HTML. EN

CVE-2019-16057 Severidad en análisis Ransomware en el catálogo el 15/04/2022

D-Link DNS-320 Remote Code Execution Vulnerability

D-Link · DNS-320 Storage Device · CWE-78

The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution. EN

CVE-2022-22954 Severidad en análisis Ransomware en el catálogo el 14/04/2022

VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

VMware · Workspace ONE Access and Identity Manager · CWE-94

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. EN

CVE-2022-24521 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Microsoft · Windows · CWE-787, CWE-1285

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2018-7602 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Drupal Core Remote Code Execution Vulnerability

Drupal · Core

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site. EN

CVE-2018-20753 Severidad en análisis Ransomware en el catálogo el 13/04/2022

Kaseya VSA Remote Code Execution Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. EN

CVE-2021-42287 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-269

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-42278 Severidad en análisis Ransomware en el catálogo el 11/04/2022

Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Microsoft · Active Directory · CWE-20

Microsoft Active Directory Domain Services contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2017-0148 Severidad en análisis Ransomware en el catálogo el 06/04/2022

Microsoft SMBv1 Server Remote Code Execution Vulnerability

Microsoft · SMBv1 server · CWE-20

The SMBv1 server in Microsoft allows remote attackers to execute arbitrary code via crafted packets. EN

CVE-2021-28799 Severidad en análisis Ransomware en el catálogo el 31/03/2022

QNAP NAS Improper Authorization Vulnerability

QNAP · Network Attached Storage (NAS) · CWE-285

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device. EN

CVE-2018-10562 Severidad en análisis Ransomware en el catálogo el 31/03/2022

Dasan GPON Routers Command Injection Vulnerability

Dasan · Gigabit Passive Optical Network (GPON) Routers · CWE-78

Dasan GPON Routers contain an authentication bypass vulnerability. When combined with CVE-2018-10561, exploitation can allow an attacker to perform remote code execution. EN

CVE-2021-38646 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office Access Connectivity Engine contains an unspecified vulnerability which can allow for remote code execution. EN

CVE-2021-26085 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability

Atlassian · Confluence Server · CWE-425

Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a pre-authorization arbitrary file read vulnerability in the /s/ endpoint. EN

CVE-2021-20028 Severidad en análisis Ransomware en el catálogo el 28/03/2022

SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability

SonicWall · Secure Remote Access (SRA) · CWE-89

SonicWall Secure Remote Access (SRA) products contain an improper neutralization of a SQL Command leading to SQL injection. EN

CVE-2018-8440 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC). EN

CVE-2018-8406 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. EN

CVE-2018-8405 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability

Microsoft · DirectX Graphics Kernel (DXGKRNL) · CWE-404

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory. EN

CVE-2017-0213 Severidad en análisis Ransomware en el catálogo el 28/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

Microsoft Windows COM Aggregate Marshaler allows for privilege escalation when an attacker runs a specially crafted application. EN