← Voltar ao Radar

Arquivo de vulnerabilidades

O catálogo completo de vulnerabilidades exploradas ativamente (CISA KEV e EUVD/ENISA) que o Radar acompanha — pesquise por CVE, fabricante ou produto.

50 de 1856 vulnerabilidades

• CVE: CVE-2021-22894

  Fabricante / produto: Ivanti · Pulse Connect Secure

  Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-38648[fabricante vigiado]

  Fabricante / produto: Microsoft · Open Management Infrastructure (OMI)

  Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2016-3235[fabricante vigiado]

  Fabricante / produto: Microsoft · Office

  Microsoft Office Object Linking & Embedding (OLE) dynamic link library (DLL) contains a side loading vulnerability due to it improperly validating input before loading libraries. Successful exploitation allows for remote code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-18935

  Fabricante / produto: Progress · Telerik UI for ASP.NET AJAX

  Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2021-27101

  Fabricante / produto: Accellion · FTA

  Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2021-21017

  Fabricante / produto: Adobe · Acrobat and Reader

  Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-1870

  Fabricante / produto: Apple · iOS, iPadOS, and macOS

  Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-6287

  Fabricante / produto: SAP · NetWeaver

  SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-22205

  Fabricante / produto: GitLab · Community and Enterprise Editions

  GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2021-30633

  Fabricante / produto: Google · Chromium Indexed DB API

  Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-4428

  Fabricante / produto: IBM · Data Risk Manager

  IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-31956[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-1040[fabricante vigiado]

  Fabricante / produto: Microsoft · Hyper-V RemoteFX

  Microsoft Hyper-V RemoteFX vGPU contains an improper input validation vulnerability due to the host server failing to properly validate input from an authenticated user on a guest operating system. Successful exploitation allows for remote code execution on the host operating system.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-27059[fabricante vigiado]

  Fabricante / produto: Microsoft · Office

  Microsoft Office contains an unspecified vulnerability that allows for remote code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-0601[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source. A successful exploit could also allow the attacker to conduct man-in-the-middle attacks and decrypt confidential information on user connections to the affected software. The vulnerability is also known under the moniker of CurveBall.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-1147[fabricante vigiado]

  Fabricante / produto: Microsoft · .NET Framework, SharePoint, Visual Studio

  Microsoft .NET Framework, Microsoft SharePoint, and Visual Studio contain a remote code execution vulnerability when the software fails to check the source markup of XML file input. Successful exploitation allows an attacker to execute code in the context of the process responsible for deserialization of the XML content.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-22893

  Fabricante / produto: Ivanti · Pulse Connect Secure

  Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2020-11651

  Fabricante / produto: SaltStack · Salt

  SaltStack Salt contains an authentication bypass vulnerability in the salt-master process ClearFuncs due to improperly validating method calls. The vulnerability allows a remote user to access some methods without authentication, which can be used to retrieve user tokens from the salt master and/or run commands on salt minions. Salt users who follow fundamental internet security guidelines and best practices are not affected by this vulnerability.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-3118[fabricante vigiado]

  Fabricante / produto: Cisco · IOS XR

  Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-8193

  Fabricante / produto: Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance

  Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-1367[fabricante vigiado]

  Fabricante / produto: Microsoft · Internet Explorer

  Microsoft Internet Explorer contains a memory corruption vulnerability in how the scripting engine handles objects in memory. Successful exploitation allows for remote code execution in the context of the current user.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2021-33771[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-31207[fabricante vigiado]

  Fabricante / produto: Microsoft · Exchange Server

  Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2020-10987

  Fabricante / produto: Tenda · AC1900 Router AC15 Model

  Tenda AC1900 Router AC15 Model contains an unspecified vulnerability that allows remote attackers to execute system commands via the deviceName POST parameter.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2018-14558

  Fabricante / produto: Tenda · AC7, AC9, and AC10 Routers

  Tenda AC7, AC9, and AC10 devices contain a command injection vulnerability due to the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input. Successful exploitation allows an attacker to execute OS commands via a crafted goform/setUsbUnload request.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-19356

  Fabricante / produto: Netis · WF2419 Devices

  Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-26919

  Fabricante / produto: NETGEAR · JGS516PE Devices

  Netgear JGS516PE devices contain a missing function level access control vulnerability.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-15949

  Fabricante / produto: Nagios · Nagios XI

  Nagios XI contains a remote code execution vulnerability in which a user can modify the check_plugin executable and insert malicious commands to execute as root.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-17026

  Fabricante / produto: Mozilla · Firefox and Thunderbird

  Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-20021

  Fabricante / produto: SonicWall · SonicWall Email Security

  SonicWall Email Security contains an improper privilege management vulnerability that allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. This vulnerability has known usage in a SonicWall Email Security exploit chain along with CVE-2021-20022 and CVE-2021-20023 to achieve privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2020-3952[fabricante vigiado]

  Fabricante / produto: VMware · vCenter Server

  VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-4006[fabricante vigiado]

  Fabricante / produto: VMware · Multiple Products

  VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector contain a command injection vulnerability. An attacker with network access to the administrative configurator on port 8443 and a valid password for the configurator administrator account can execute commands with unrestricted privileges on the underlying operating system.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-6820

  Fabricante / produto: Mozilla · Firefox and Thunderbird

  Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-0863[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2019-1214[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-8644

  Fabricante / produto: PlaySMS · PlaySMS

  PlaySMS contains a server-side template injection vulnerability that allows for remote code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-14883

  Fabricante / produto: Oracle · WebLogic Server

  Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-14882

  Fabricante / produto: Oracle · WebLogic Server

  Oracle WebLogic Server contains an unspecified vulnerability, which is assessed to allow for remote code execution, based on this vulnerability being related to CVE-2020-14750.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-14750

  Fabricante / produto: Oracle · WebLogic Server

  Oracle WebLogic Server contains an unspecified vulnerability allowing an unauthenticated attacker to perform remote code execution. This vulnerability is related to CVE-2020-14882.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2015-4852

  Fabricante / produto: Oracle · WebLogic Server

  Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-14871

  Fabricante / produto: Oracle · Solaris and Zettabyte File System (ZFS)

  Oracle Solaris and Oracle ZFS Storage Appliance Kit contain an unspecified vulnerability causing high impacts to confidentiality, integrity, and availability of affected systems.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2012-3152

  Fabricante / produto: Oracle · Fusion Middleware

  Oracle Fusion Middleware Reports Developer contains an unspecified vulnerability that allows remote attackers to affect confidentiality and integrity of affected systems.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-6819

  Fabricante / produto: Mozilla · Firefox and Thunderbird

  Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-36955[fabricante vigiado]

  Fabricante / produto: Microsoft · Windows

  Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2019-0604[fabricante vigiado]

  Fabricante / produto: Microsoft · SharePoint

  Microsoft SharePoint fails to check the source markup of an application package. An attacker who successfully exploits the vulnerability could run remote code in the context of the SharePoint application pool and the SharePoint server farm account.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Ransomware conhecido]

• CVE: CVE-2017-11774[fabricante vigiado]

  Fabricante / produto: Microsoft · Office

  Microsoft Office Outlook contains a security feature bypass vulnerability due to improperly handling objects in memory. Successful exploitation allows an attacker to execute commands.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2020-1380[fabricante vigiado]

  Fabricante / produto: Microsoft · Internet Explorer

  Microsoft Internet Explorer contains a memory corruption vulnerability which can allow for remote code execution in the context of the current user.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2018-11776

  Fabricante / produto: Apache · Struts

  Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace. Or, using URL tag which doesn't have value and action set and in same time, its upper package configuration have no or wildcard namespace.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-30858

  Fabricante / produto: Apple · iOS, iPadOS, and macOS

  Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]

• CVE: CVE-2021-30663

  Fabricante / produto: Apple · Multiple Products

  Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  Ver na fonte ↗

  Fonte: CISA KEV

  Adicionado: 03/11/21

  Gravidade: [Exploração ativa confirmada]