Vulnerabilidades (CVE) que estão sendo exploradas ativamente, segundo o catálogo KEV da CISA, com severidade CVSS e probabilidade de exploração (EPSS).
35exploradas nos últimos 30 dias
13críticas (CVSS ≥ 9)
0usadas em ransomware
1769no catálogo KEV
CVE-2024-3393Severidade em análiseno catálogo em 30/12/2024
Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
Palo Alto Networks · PAN-OS · CWE-754
Palo Alto Networks PAN-OS contains a vulnerability in parsing and logging malicious DNS packets in the DNS Security feature that, when exploited, allows an unauthenticated attacker to remotely reboot the firewall. Repeated attempts to trigger this condition will cause the firewall to enter maintenance mode. EN
CVE-2024-35250Severidade em análiseno catálogo em 16/12/2024
Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · CWE-822
Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges. EN
CVE-2024-20767Severidade em análiseno catálogo em 16/12/2024
Adobe ColdFusion Improper Access Control Vulnerability
Adobe · ColdFusion · CWE-284
Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel. EN
CVE-2024-49138Severidade em análiseno catálogo em 10/12/2024
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability
Microsoft · Windows · CWE-122
Microsoft Windows Common Log File System (CLFS) driver contains a heap-based buffer overflow vulnerability that allows a local attacker to escalate privileges. EN
CVE-2024-21287Severidade em análiseno catálogo em 21/11/2024
Oracle Agile Product Lifecycle Management (PLM) contains an incorrect authorization vulnerability in the Process Extension component of the Software Development Kit. Successful exploitation of this vulnerability may result in unauthenticated file disclosure. EN
CVE-2024-38813Severidade em análiseno catálogo em 20/11/2024
VMware vCenter Server Privilege Escalation Vulnerability
VMware · vCenter Server · CWE-250, CWE-273
VMware vCenter contains an improper check for dropped privileges vulnerability. This vulnerability could allow an attacker with network access to the vCenter Server to escalate privileges to root by sending a specially crafted packet. EN
CVE-2024-38812Severidade em análiseno catálogo em 20/11/2024
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
VMware · vCenter Server · CWE-122
VMware vCenter Server contains a heap-based buffer overflow vulnerability in the implementation of the DCERPC protocol. This vulnerability could allow an attacker with network access to the vCenter Server to execute remote code by sending a specially crafted packet. EN
CVE-2024-9474Severidade em análiseRansomwareno catálogo em 18/11/2024
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Palo Alto Networks · PAN-OS · CWE-77
Palo Alto Networks PAN-OS contains an OS command injection vulnerability that allows for privilege escalation through the web-based management interface for several PAN products, including firewalls and VPN concentrators. EN
CVE-2024-1212Severidade em análiseno catálogo em 18/11/2024
Progress Kemp LoadMaster OS Command Injection Vulnerability
Progress · Kemp LoadMaster · CWE-78
Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution. EN
CVE-2024-0012Severidade em análiseRansomwareno catálogo em 18/11/2024
Palo Alto Networks PAN-OS contains an authentication bypass vulnerability in the web-based management interface for several PAN-OS products, including firewalls and VPN concentrators. EN
CVE-2024-9465Severidade em análiseno catálogo em 14/11/2024
Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. EN
CVE-2024-9463Severidade em análiseno catálogo em 14/11/2024
Palo Alto Networks Expedition OS Command Injection Vulnerability
Palo Alto Networks · Expedition · CWE-78
Palo Alto Networks Expedition contains an OS command injection vulnerability that allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. EN
CVE-2024-49039Severidade em análiseRansomwareno catálogo em 12/11/2024
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability
Microsoft · Windows · CWE-287
Microsoft Windows Task Scheduler contains a privilege escalation vulnerability that can allow an attacker-provided, local application to escalate privileges outside of its AppContainer, and access privileged RPC functions. EN
CVE-2024-43451Severidade em análiseno catálogo em 12/11/2024
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Microsoft · Windows · CWE-73
Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user. EN
CVE-2021-26086Severidade em análiseno catálogo em 12/11/2024
Atlassian Jira Server and Data Center Path Traversal Vulnerability
Atlassian · Jira Server and Data Center · CWE-22
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint. EN
CVE-2014-2120Severidade em análiseno catálogo em 12/11/2024
Cisco Adaptive Security Appliance (ASA) contains a cross-site scripting (XSS) vulnerability in the WebVPN login page. This vulnerability allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter. EN
CVE-2024-5910Severidade em análiseno catálogo em 07/11/2024
Palo Alto Networks Expedition contains a missing authentication vulnerability that allows an attacker with network access to takeover an Expedition admin account and potentially access configuration secrets, credentials, and other data. EN
CVE-2024-20481Severidade em análiseno catálogo em 24/10/2024
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service. EN
CVE-2024-47575Severidade em análiseno catálogo em 23/10/2024
Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests. EN
CVE-2024-38094Severidade em análiseRansomwareno catálogo em 22/10/2024
Microsoft SharePoint Deserialization Vulnerability
Microsoft · SharePoint · CWE-502
Microsoft SharePoint contains a deserialization vulnerability that allows for remote code execution. EN
CVE-2024-40711Severidade em análiseRansomwareno catálogo em 17/10/2024
Veeam Backup and Replication Deserialization Vulnerability
Veeam · Backup & Replication · CWE-502
Veeam Backup and Replication contains a deserialization vulnerability allowing an unauthenticated user to perform remote code execution. EN
CVE-2024-30088Severidade em análiseRansomwareno catálogo em 15/10/2024
Microsoft Windows Kernel TOCTOU Race Condition Vulnerability
Microsoft · Windows · CWE-367
Microsoft Windows Kernel contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that could allow for privilege escalation. EN
CVE-2024-9380Severidade em análiseno catálogo em 09/10/2024
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
Ivanti · Cloud Services Appliance (CSA) · CWE-77
Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. EN
CVE-2024-9379Severidade em análiseno catálogo em 09/10/2024
Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements. EN
Quer saber se o seu ambiente está exposto?
Avaliamos versões, acessos e integrações do seu ERP e priorizamos as correções.
O Bit é uma IA e pode errar. Não compartilhe senhas ou dados pessoais. As conversas não são armazenadas. Saiba mais
Sua privacidade importa
Usamos cookies essenciais para o site funcionar e, com sua permissão, cookies do Google para medir audiência e exibir anúncios — inclusive personalizados — que mantêm as ferramentas gratuitas. Você pode mudar sua escolha a qualquer momento em “Preferências de cookies”, no rodapé. Saiba mais.
