Radar de Segurança

CVE-2024-6670 Severidade em análise Ransomware no catálogo em 16/09/2024

Progress WhatsUp Gold SQL Injection Vulnerability

Progress · WhatsUp Gold · CWE-89

Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. EN

CVE-2024-40766 Severidade em análise Ransomware no catálogo em 09/09/2024

SonicWall SonicOS Improper Access Control Vulnerability

SonicWall · SonicOS · CWE-284

SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash. EN

CVE-2017-1000253 Severidade em análise Ransomware no catálogo em 09/09/2024

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Linux · Kernel · CWE-119

Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. EN

CVE-2024-23897 Severidade em análise Ransomware no catálogo em 19/08/2024

Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

Jenkins · Jenkins Command Line Interface (CLI) · CWE-27

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. EN

CVE-2024-37085 Severidade em análise Ransomware no catálogo em 30/07/2024

VMware ESXi Authentication Bypass Vulnerability

VMware · ESXi · CWE-305

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. EN

CVE-2024-23692 Severidade em análise Ransomware no catálogo em 09/07/2024

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Rejetto · HTTP File Server · CWE-1336

Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request. EN

CVE-2024-26169 Severidade em análise Ransomware no catálogo em 13/06/2024

Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

Microsoft · Windows · CWE-269

Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges. EN

CVE-2024-4577 Severidade em análise Ransomware no catálogo em 12/06/2024

PHP-CGI OS Command Injection Vulnerability

PHP Group · PHP · CWE-78

PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823. EN

CVE-2024-24919 Severidade em análise Ransomware no catálogo em 30/05/2024

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Check Point · Quantum Security Gateways · CWE-200

Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances. EN

CVE-2024-1086 Severidade em análise Ransomware no catálogo em 30/05/2024

Linux Kernel Use-After-Free Vulnerability

Linux · Kernel · CWE-416

Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation. EN

CVE-2023-43208 Severidade em análise Ransomware no catálogo em 20/05/2024

NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

NextGen Healthcare · Mirth Connect · CWE-502

NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request. EN

CVE-2024-30051 Severidade em análise Ransomware no catálogo em 14/05/2024

Microsoft DWM Core Library Privilege Escalation Vulnerability

Microsoft · DWM Core Library · CWE-122

Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges. EN

CVE-2024-3400 Severidade em análise Ransomware no catálogo em 12/04/2024

Palo Alto Networks PAN-OS Command Injection Vulnerability

Palo Alto Networks · PAN-OS · CWE-20, CWE-77

Palo Alto Networks PAN-OS GlobalProtect feature contains a command injection vulnerability that allows an unauthenticated attacker to execute commands with root privileges on the firewall. EN

CVE-2023-24955 Severidade em análise Ransomware no catálogo em 26/03/2024

Microsoft SharePoint Server Code Injection Vulnerability

Microsoft · SharePoint Server · CWE-94

Microsoft SharePoint Server contains a code injection vulnerability that allows an authenticated attacker with Site Owner privileges to execute code remotely. EN

CVE-2023-48788 Severidade em análise Ransomware no catálogo em 25/03/2024

Fortinet FortiClient EMS SQL Injection Vulnerability

Fortinet · FortiClient EMS · CWE-89

Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests. EN

CVE-2021-44529 Severidade em análise Ransomware no catálogo em 25/03/2024

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA) · CWE-94

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). EN

CVE-2024-27198 Severidade em análise Ransomware no catálogo em 07/03/2024

JetBrains TeamCity Authentication Bypass Vulnerability

JetBrains · TeamCity · CWE-288

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. EN

CVE-2024-21338 Severidade em análise Ransomware no catálogo em 04/03/2024

Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

Microsoft · Windows · CWE-822

Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. EN

CVE-2024-1709 Severidade em análise Ransomware no catálogo em 22/02/2024

ConnectWise ScreenConnect Authentication Bypass Vulnerability

ConnectWise · ScreenConnect · CWE-288

ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices. EN

CVE-2020-3259 Severidade em análise Ransomware no catálogo em 15/02/2024

Cisco ASA and FTD Information Disclosure Vulnerability

Cisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) · CWE-200

Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations. EN

CVE-2024-21412 Severidade em análise Ransomware no catálogo em 13/02/2024

Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

Microsoft · Windows · CWE-693

Microsoft Windows Internet Shortcut Files contains an unspecified vulnerability that allows for a security feature bypass. EN

CVE-2024-21762 Severidade em análise Ransomware no catálogo em 09/02/2024

Fortinet FortiOS Out-of-Bound Write Vulnerability

Fortinet · FortiOS · CWE-787

Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests. EN

CVE-2024-21893 Severidade em análise Ransomware no catálogo em 31/01/2024

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

Ivanti · Connect Secure, Policy Secure, and Neurons · CWE-918

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication. EN

CVE-2023-22527 Severidade em análise Ransomware no catálogo em 24/01/2024

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Atlassian · Confluence Data Center and Server · CWE-74

Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution. EN