Radar de Segurança

CVE-2021-31207 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Exchange Server Security Feature Bypass Vulnerability

Microsoft · Exchange Server · CWE-20, CWE-434

Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. EN

CVE-2021-31201 Severidade em análise no catálogo em 03/11/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-31199 Severidade em análise no catálogo em 03/11/2021

Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability

Microsoft · Enhanced Cryptographic Provider

Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-30633 Severidade em análise no catálogo em 03/11/2021

Google Chromium Indexed DB API Use-After-Free Vulnerability

Google · Chromium Indexed DB API · CWE-416

Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-30632 Severidade em análise no catálogo em 03/11/2021

Google Chromium V8 Out-of-Bounds Write Vulnerability

Google · Chromium V8 · CWE-122

Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-30563 Severidade em análise no catálogo em 03/11/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-30554 Severidade em análise no catálogo em 03/11/2021

Google Chromium WebGL Use-After-Free Vulnerability

Google · Chromium WebGL · CWE-416

Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-30551 Severidade em análise no catálogo em 03/11/2021

Google Chromium V8 Type Confusion Vulnerability

Google · Chromium V8 · CWE-122, CWE-843

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. EN

CVE-2021-28550 Severidade em análise no catálogo em 03/11/2021

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe · Acrobat and Reader · CWE-416

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. EN

CVE-2021-28310 Severidade em análise no catálogo em 03/11/2021

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-787

Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. EN

CVE-2021-27085 Severidade em análise no catálogo em 03/11/2021

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer

Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. EN

CVE-2021-27065 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-39

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN

CVE-2021-27059 Severidade em análise no catálogo em 03/11/2021

Microsoft Office Remote Code Execution Vulnerability

Microsoft · Office

Microsoft Office contains an unspecified vulnerability that allows for remote code execution. EN

CVE-2021-26858 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN

CVE-2021-26857 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-502

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN

CVE-2021-26855 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft · Exchange Server · CWE-918

Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN

CVE-2021-26411 Severidade em análise Ransomware no catálogo em 03/11/2021

Microsoft Internet Explorer Memory Corruption Vulnerability

Microsoft · Internet Explorer · CWE-416

Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. EN

CVE-2021-26084 Severidade em análise Ransomware no catálogo em 03/11/2021

Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability

Atlassian · Confluence Server and Data Center · CWE-917

Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code. EN

CVE-2021-22986 Severidade em análise Ransomware no catálogo em 03/11/2021

F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability

F5 · BIG-IP and BIG-IQ Centralized Management · CWE-863

F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services. EN

CVE-2021-22900 Severidade em análise no catálogo em 03/11/2021

Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability

Ivanti · Pulse Connect Secure · CWE-94

Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface. EN

CVE-2021-22899 Severidade em análise no catálogo em 03/11/2021

Ivanti Pulse Connect Secure Command Injection Vulnerability

Ivanti · Pulse Connect Secure · CWE-77

Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. EN

CVE-2021-22894 Severidade em análise no catálogo em 03/11/2021

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Ivanti · Pulse Connect Secure · CWE-94

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room. EN

CVE-2021-22893 Severidade em análise Ransomware no catálogo em 03/11/2021

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti · Pulse Connect Secure · CWE-287

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. EN

CVE-2021-22005 Severidade em análise Ransomware no catálogo em 03/11/2021

VMware vCenter Server File Upload Vulnerability

VMware · vCenter Server · CWE-23

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code. EN