← Voltar ao Radar

Arquivo de vulnerabilidades

O catálogo completo de vulnerabilidades exploradas ativamente (CISA KEV e EUVD/ENISA) que o Radar acompanha — pesquise por CVE, fabricante ou produto.

50 de 1670 vulnerabilidades

• CVE: CVE-2023-35082

  Fabricante / produto: Ivanti · Endpoint Manager Mobile (EPMM) and MobileIron Core

  Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 18/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2024-0519

  Fabricante / produto: Google · Chromium V8

  Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 17/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-6549

  Fabricante / produto: Citrix · NetScaler ADC and NetScaler Gateway

  Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 17/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-6548

  Fabricante / produto: Citrix · NetScaler ADC and NetScaler Gateway

  Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 17/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2018-15133

  Fabricante / produto: Laravel · Laravel Framework

  Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 16/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-29357[fabricante vigiado]

  Fabricante / produto: Microsoft · SharePoint Server

  Microsoft SharePoint Server contains an unspecified vulnerability that allows an unauthenticated attacker, who has gained access to spoofed JWT authentication tokens, to use them for executing a network attack. This attack bypasses authentication, enabling the attacker to gain administrator privileges.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 10/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-46805

  Fabricante / produto: Ivanti · Connect Secure and Policy Secure

  Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 10/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2024-21887

  Fabricante / produto: Ivanti · Connect Secure and Policy Secure

  Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 10/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-23752

  Fabricante / produto: Joomla! · Joomla!

  Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2016-20017

  Fabricante / produto: D-Link · DSL-2750B Devices

  D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-41990

  Fabricante / produto: Apple · Multiple Products

  Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-27524

  Fabricante / produto: Apache · Superset

  Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-29300

  Fabricante / produto: Adobe · ColdFusion

  Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-38203

  Fabricante / produto: Adobe · ColdFusion

  Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/01/24

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-7101

  Fabricante / produto: Spreadsheet::ParseExcel · Spreadsheet::ParseExcel

  Spreadsheet::ParseExcel contains a remote code execution vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, the issue stems from the evaluation of Number format strings within the Excel parsing logic.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 02/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-7024

  Fabricante / produto: Google · Chromium WebRTC

  Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 02/01/24

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-49897

  Fabricante / produto: FXC · AE1021, AE1021PE

  FXC AE1021 and AE1021PE contain an OS command injection vulnerability that allows authenticated users to execute commands via a network.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 21/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-47565

  Fabricante / produto: QNAP · VioStor NVR

  QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 21/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-6448

  Fabricante / produto: Unitronics · Vision PLC and HMI

  Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 11/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-41266

  Fabricante / produto: Qlik · Sense

  Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to create an anonymous session by sending maliciously crafted HTTP requests. This anonymous session could allow the attacker to send further requests to unauthorized endpoints.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 07/12/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-41265

  Fabricante / produto: Qlik · Sense

  Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 07/12/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-33107

  Fabricante / produto: Qualcomm · Multiple Chipsets

  Multiple Qualcomm chipsets contain an integer overflow vulnerability due to memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 05/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-33106

  Fabricante / produto: Qualcomm · Multiple Chipsets

  Multiple Qualcomm chipsets contain a use of out-of-range pointer offset vulnerability due to memory corruption in Graphics while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 05/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-33063

  Fabricante / produto: Qualcomm · Multiple Chipsets

  Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 05/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2022-22071

  Fabricante / produto: Qualcomm · Multiple Chipsets

  Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 05/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-42917

  Fabricante / produto: Apple · Multiple Products

  Apple iOS, iPadOS, macOS, and Safari WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 04/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-42916

  Fabricante / produto: Apple · Multiple Products

  Apple iOS, iPadOS, macOS, and Safari WebKit contain an out-of-bounds read vulnerability that may disclose sensitive information when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 04/12/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-6345

  Fabricante / produto: Google · Chromium Skia

  Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 30/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-49103

  Fabricante / produto: ownCloud · ownCloud graphapi

  ownCloud graphapi contains an information disclosure vulnerability that can reveal sensitive data stored in phpinfo() via GetPhpInfo.php, including administrative credentials.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 30/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-4911

  Fabricante / produto: GNU · GNU C Library

  GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 21/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36584[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 16/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-1671

  Fabricante / produto: Sophos · Web Appliance

  Sophos Web Appliance contains a command injection vulnerability in the warn-proceed handler that allows for remote code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 16/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-2551

  Fabricante / produto: Oracle · Fusion Middleware

  Oracle Fusion Middleware contains an unspecified vulnerability in the WLS Core Components that allows an unauthenticated attacker with network access via IIOP to compromise the WebLogic Server.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 16/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36033[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 14/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36025[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to bypass Windows Defender SmartScreen checks and their associated prompts.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 14/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36036[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 14/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-47246

  Fabricante / produto: SysAid · SysAid Server

  SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-36844

  Fabricante / produto: Juniper · Junos OS

  Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36845

  Fabricante / produto: Juniper · Junos OS

  Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36846

  Fabricante / produto: Juniper · Junos OS

  Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36847

  Fabricante / produto: Juniper · Junos OS

  Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-36851

  Fabricante / produto: Juniper · Junos OS

  Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 13/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-29552

  Fabricante / produto: IETF · Service Location Protocol (SLP)

  The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 08/11/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-22518

  Fabricante / produto: Atlassian · Confluence Data Center and Server

  Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 07/11/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-46604

  Fabricante / produto: Apache · ActiveMQ

  Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 02/11/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-46748

  Fabricante / produto: F5 · BIG-IP Configuration Utility

  F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 31/10/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-46747

  Fabricante / produto: F5 · BIG-IP Configuration Utility

  F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 31/10/23

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2023-5631

  Fabricante / produto: Roundcube · Webmail

  Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 26/10/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-20273[fabricante vigiado]

  Fabricante / produto: Cisco · Cisco IOS XE Web UI

  Cisco IOS XE contains a command injection vulnerability in the web user interface. When chained with CVE-2023-20198, the attacker can leverage the new local user to elevate privilege to root and write the implant to the file system. Cisco identified CVE-2023-20273 as the vulnerability exploited to deploy the implant. CVE-2021-1435, previously associated with the exploitation events, is no longer believed to be related to this activity.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 23/10/23

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2023-4966

  Fabricante / produto: Citrix · NetScaler ADC and NetScaler Gateway

  Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 18/10/23

  Gravidade: [Ransomware conhecido]