Radar de Segurança

CVE-2010-3035 Severidade em análise no catálogo em 25/03/2022

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XR · CWE-20

Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). EN

CVE-2010-2861 Severidade em análise Ransomware no catálogo em 25/03/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-22

A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files. EN

CVE-2009-2055 Severidade em análise no catálogo em 25/03/2022

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Cisco · IOS XR · CWE-20

Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). EN

CVE-2009-0927 Severidade em análise no catálogo em 25/03/2022

Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability

Adobe · Reader and Acrobat · CWE-20

Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code. EN

CVE-2020-5135 Severidade em análise Ransomware no catálogo em 15/03/2022

SonicWall SonicOS Buffer Overflow Vulnerability

SonicWall · SonicOS · CWE-120

A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. EN

CVE-2019-1405 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation. EN

CVE-2019-1322 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-1315 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. EN

CVE-2019-1253 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions. EN

CVE-2019-1132 Severidade em análise no catálogo em 15/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. EN

CVE-2019-1129 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-1069 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Task Scheduler Privilege Escalation Vulnerability

Microsoft · Task Scheduler · CWE-59

A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations. EN

CVE-2019-1064 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0841 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

Microsoft · Windows · CWE-59

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2019-0543 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Privilege Escalation Vulnerability

Microsoft · Windows · CWE-287

A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context. EN

CVE-2018-8120 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-404

A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. EN

CVE-2017-0101 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Transaction Manager Privilege Escalation Vulnerability

Microsoft · Windows · CWE-119

A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. EN

CVE-2016-3309 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. EN

CVE-2015-2546 Severidade em análise Ransomware no catálogo em 15/03/2022

Microsoft Win32k Memory Corruption Vulnerability

Microsoft · Win32k · CWE-119

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application. EN

CVE-2021-21973 Severidade em análise no catálogo em 07/03/2022

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

VMware · vCenter Server and Cloud Foundation · CWE-20, CWE-918

VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure. EN

CVE-2019-11581 Severidade em análise no catálogo em 07/03/2022

Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability

Atlassian · Jira Server and Data Center · CWE-74

Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution. EN

CVE-2013-0631 Severidade em análise no catálogo em 07/03/2022

Adobe ColdFusion Information Disclosure Vulnerability

Adobe · ColdFusion · CWE-200

Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server. EN

CVE-2013-0629 Severidade em análise no catálogo em 07/03/2022

Adobe ColdFusion Directory Traversal Vulnerability

Adobe · ColdFusion · CWE-264

Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories. EN

CVE-2013-0625 Severidade em análise no catálogo em 07/03/2022

Adobe ColdFusion Authentication Bypass Vulnerability

Adobe · ColdFusion · CWE-255

Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access. EN