Vulnerabilidades (CVE) que estão sendo exploradas ativamente, segundo o catálogo KEV da CISA, com severidade CVSS e probabilidade de exploração (EPSS).
34exploradas nos últimos 30 dias
13críticas (CVSS ≥ 9)
0usadas em ransomware
1768no catálogo KEV
CVE-2021-28663Severidade em análiseno catálogo em 03/11/2021
Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability
Arm · Mali Graphics Processing Unit (GPU) · CWE-416
Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and/or disclose information. EN
CVE-2021-28550Severidade em análiseno catálogo em 03/11/2021
Adobe Acrobat and Reader Use-After-Free Vulnerability
Adobe · Acrobat and Reader · CWE-416
Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user. EN
CVE-2021-28310Severidade em análiseno catálogo em 03/11/2021
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft · Win32k · CWE-787
Microsoft Windows Win32k contains an unspecified vulnerability that allows for privilege escalation. EN
CVE-2021-27562Severidade em análiseno catálogo em 03/11/2021
Arm Trusted Firmware Out-of-Bounds Write Vulnerability
Arm · Trusted Firmware · CWE-787
Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers. EN
CVE-2021-27561Severidade em análiseno catálogo em 03/11/2021
Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html. EN
CVE-2021-27102Severidade em análiseRansomwareno catálogo em 03/11/2021
Accellion FTA OS Command Injection Vulnerability
Accellion · FTA · CWE-20, CWE-78
Accellion FTA contains an OS command injection vulnerability exploited via a local web service call. EN
CVE-2021-27101Severidade em análiseRansomwareno catálogo em 03/11/2021
Accellion FTA SQL Injection Vulnerability
Accellion · FTA · CWE-89, CWE-138
Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html. EN
CVE-2021-27085Severidade em análiseno catálogo em 03/11/2021
Microsoft Internet Explorer Remote Code Execution Vulnerability
Microsoft · Internet Explorer
Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution. EN
CVE-2021-27065Severidade em análiseRansomwareno catálogo em 03/11/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server · CWE-39
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN
CVE-2021-27059Severidade em análiseno catálogo em 03/11/2021
Microsoft Office Remote Code Execution Vulnerability
Microsoft · Office
Microsoft Office contains an unspecified vulnerability that allows for remote code execution. EN
CVE-2021-26858Severidade em análiseRansomwareno catálogo em 03/11/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN
CVE-2021-26857Severidade em análiseRansomwareno catálogo em 03/11/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server · CWE-502
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN
CVE-2021-26855Severidade em análiseRansomwareno catálogo em 03/11/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft · Exchange Server · CWE-918
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. EN
CVE-2021-26411Severidade em análiseRansomwareno catálogo em 03/11/2021
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft · Internet Explorer · CWE-416
Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. EN
CVE-2021-26084Severidade em análiseRansomwareno catálogo em 03/11/2021
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian · Confluence Server and Data Center · CWE-917
Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code. EN
CVE-2021-23874Severidade em análiseno catálogo em 03/11/2021
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability
McAfee · McAfee Total Protection (MTP) · CWE-284
McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense. EN
CVE-2021-22986Severidade em análiseRansomwareno catálogo em 03/11/2021
F5 · BIG-IP and BIG-IQ Centralized Management · CWE-863
F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services. EN
CVE-2021-22900Severidade em análiseno catálogo em 03/11/2021
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface. EN
CVE-2021-22899Severidade em análiseno catálogo em 03/11/2021
Ivanti Pulse Connect Secure contains a command injection vulnerability that allows remote authenticated users to perform remote code execution via Windows File Resource Profiles. EN
CVE-2021-22894Severidade em análiseno catálogo em 03/11/2021
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
Ivanti · Pulse Connect Secure · CWE-94
Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room. EN
CVE-2021-22893Severidade em análiseRansomwareno catálogo em 03/11/2021
Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. EN
CVE-2021-22506Severidade em análiseno catálogo em 03/11/2021
Micro Focus Access Manager Information Leakage Vulnerability
Micro Focus · Micro Focus Access Manager
Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used. EN
Quer saber se o seu ambiente está exposto?
Avaliamos versões, acessos e integrações do seu ERP e priorizamos as correções.
O Bit é uma IA e pode errar. Não compartilhe senhas ou dados pessoais. As conversas não são armazenadas. Saiba mais
Sua privacidade importa
Usamos cookies essenciais para o site funcionar e, com sua permissão, cookies do Google para medir audiência e exibir anúncios — inclusive personalizados — que mantêm as ferramentas gratuitas. Você pode mudar sua escolha a qualquer momento em “Preferências de cookies”, no rodapé. Saiba mais.
