Vulnerabilidades exploradas (CISA KEV)

CVE-2024-29824 Alta · 8.8 KEV Urgente · 79 Exploit público CWE-89 31/05/2024

Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

CVE-2024-23692 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-94 31/05/2024

Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

CVE-2024-4358 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-290 29/05/2024

Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

CVE-2024-24919 Alta · 8.6 KEV Urgente · 89 Exploit público Ransomware CWE-200 28/05/2024

Check Point Quantum Security Gateways Information Disclosure Vulnerability

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

CVE-2024-5274 Crítica · 9.6 KEV Alta · 65 Exploit público CWE-843 28/05/2024

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2024-4978 Alta · 8.4 KEV Alta · 56 CWE-506 22/05/2024

Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.

CVE-2024-4947 Crítica · 9.6 KEV Alta · 66 Exploit público CWE-843 15/05/2024

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2024-30051 Alta · 7.8 KEV Urgente · 71 Exploit público Ransomware CWE-787 14/05/2024

Microsoft DWM Core Library Privilege Escalation Vulnerability

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2024-30040 Alta · 8.8 KEV Alta · 55 CWE-20 14/05/2024

Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

CVE-2024-4761 Alta · 8.8 KEV Alta · 61 Exploit público CWE-787 14/05/2024

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVE-2024-4671 Crítica · 9.6 KEV Alta · 59 CWE-416 14/05/2024

Google Chromium Visuals Use-After-Free Vulnerability

Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2024-32113 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-22 08/05/2024

Apache OFBiz Path Traversal Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13. Users are recommended to upgrade to version 18.12.13, which fixes the issue.

CVE-2023-50224 Média · 6.5 KEV Alta · 53 CWE-290 03/05/2024

TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.