Vulnerabilidades exploradas (CISA KEV)

CVE-2024-9463 Alta · 7.5 KEV Alta · 69 Exploit público CWE-78 09/10/2024

Palo Alto Networks Expedition OS Command Injection Vulnerability

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.

CVE-2024-9680 Crítica · 9.8 KEV Urgente · 79 Exploit público Ransomware CWE-416 09/10/2024

Mozilla Firefox Use-After-Free Vulnerability

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.

CVE-2024-43572 Alta · 7.8 KEV Alta · 56 CWE-707 08/10/2024

Microsoft Windows Management Console Remote Code Execution Vulnerability

Microsoft Management Console Remote Code Execution Vulnerability

CVE-2024-43573 Alta · 8.1 KEV Alta · 56 CWE-79 08/10/2024

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-43468 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-89 08/10/2024

Microsoft Configuration Manager SQL Injection Vulnerability

Microsoft Configuration Manager Remote Code Execution Vulnerability

CVE-2024-9379 Alta · 7.2 KEV Alta · 56 CWE-89 08/10/2024

Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.

CVE-2024-9380 Alta · 7.2 KEV Alta · 56 CWE-78 08/10/2024

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

CVE-2024-43047 Alta · 7.8 KEV Alta · 49 CWE-416 07/10/2024

Qualcomm Multiple Chipsets Use-After-Free Vulnerability

Memory corruption while maintaining memory maps of HLOS memory.

CVE-2024-45519 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-78 02/10/2024

Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0 Patch 41, 10 before 10.0.9, and 10.1 before 10.1.1 sometimes allows unauthenticated users to execute commands.

CVE-2024-8963 Crítica · 9.1 KEV Urgente · 73 Exploit público CWE-22 19/09/2024

Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.

CVE-2024-8957 Alta · 7.2 KEV Alta · 56 CWE-78 17/09/2024

PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

CVE-2024-8956 Crítica · 9.1 KEV Alta · 63 CWE-287 17/09/2024

PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can leak sensitive data such as usernames, password hashes, and configurations details. Additionally, the attacker can update individual configuration values or overwrite the whole file.

CVE-2024-38813 Crítica · 9.8 KEV Alta · 60 CWE-273 17/09/2024

VMware vCenter Server Privilege Escalation Vulnerability

The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.

CVE-2024-38812 Crítica · 9.8 KEV Alta · 63 CWE-787 17/09/2024

VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger this vulnerability by sending a specially crafted network packet potentially leading to remote code execution.

CVE-2024-8190 Alta · 7.2 KEV Alta · 62 Exploit público CWE-78 10/09/2024

Ivanti Cloud Services Appliance OS Command Injection Vulnerability

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.

CVE-2024-43461 Alta · 8.8 KEV Alta · 56 CWE-451 10/09/2024

Microsoft Windows MSHTML Platform Spoofing Vulnerability

Windows MSHTML Platform Spoofing Vulnerability

CVE-2024-38226 Alta · 7.3 KEV Alta · 54 CWE-693 10/09/2024

Microsoft Publisher Protection Mechanism Failure Vulnerability

Microsoft Publisher Security Feature Bypass Vulnerability

CVE-2024-38217 Média · 5.4 KEV Alta · 52 CWE-693 10/09/2024

Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

Windows Mark of the Web Security Feature Bypass Vulnerability

CVE-2024-38014 Alta · 7.8 KEV Alta · 55 CWE-269 10/09/2024

Microsoft Windows Installer Improper Privilege Management Vulnerability

Windows Installer Elevation of Privilege Vulnerability

CVE-2024-40711 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-502 07/09/2024

Veeam Backup and Replication Deserialization Vulnerability

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE).

CVE-2024-20439 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-798 04/09/2024

Cisco Smart Licensing Utility Static Credential Vulnerability

A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.

CVE-2024-45195 Alta · 7.5 KEV Alta · 69 Exploit público CWE-425 04/09/2024

Apache OFBiz Forced Browsing Vulnerability

Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.

CVE-2024-6670 Crítica · 9.8 KEV Urgente · 90 Exploit público Ransomware CWE-89 29/08/2024

Progress WhatsUp Gold SQL Injection Vulnerability

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

CVE-2024-40766 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-284 23/08/2024

SonicWall SonicOS Improper Access Control Vulnerability

An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.

CVE-2024-39717 Alta · 7.2 KEV Alta · 65 CWE-434 22/08/2024

Versa Director Dangerous File Type Upload Vulnerability

The Versa Director GUI provides an option to customize the look and feel of the user interface. This option is only available for a user logged with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin. (Tenant level users do not have this privilege). The “Change Favicon” (Favorite Icon) option can be mis-used to upload a malicious file ending with .png extension to masquerade as image file. This is possible only after a user with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin has successfully authenticated and logged in.