Início / CVEs
Vulnerabilidades exploradas (CISA KEV)
CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.
CVE-2022-0185
Alta · 8.4
KEV Alta · 62 Exploit público CWE-191 11/02/2022
Linux Kernel Heap-Based Buffer Overflow Vulnerability
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.
CVE-2022-24112
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-290 11/02/2022
Apache APISIX Authentication Bypass Vulnerability
An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.
CVE-2022-20700
Crítica · 9.8
KEV Alta · 62 CWE-787 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-20701
Alta · 7.8
KEV Alta · 58 CWE-787 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-20703
Alta · 8.0
KEV Alta · 58 CWE-295 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-20708
Alta · 8.0
KEV Alta · 59 CWE-78 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-20699
Crítica · 9.8
KEV Urgente · 81 Exploit público CWE-1284 10/02/2022
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVE-2022-22536
Crítica · 10.0
KEV Urgente · 81 Exploit público CWE-444 09/02/2022
SAP Multiple Products HTTP Request Smuggling Vulnerability
SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.
CVE-2022-22718
Alta · 7.8
KEV Alta · 62 Exploit público 09/02/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21999
Alta · 7.8
KEV Urgente · 84 Exploit público Ransomware CWE-22 09/02/2022
Microsoft Windows Print Spooler Privilege Escalation Vulnerability
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21971
Alta · 7.8
KEV Alta · 62 Exploit público CWE-824 09/02/2022
Execução Remota de Código no Microsoft Windows Runtime
Vulnerabilidade de Execução Remota de Código no Windows Runtime
CVE-2022-24682
Média · 6.1
KEV Alta · 67 Exploit público Ransomware CWE-116 09/02/2022
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.
CVE-2021-4034
Alta · 7.8
KEV Urgente · 86 Exploit público Ransomware CWE-125 28/01/2022
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
CVE-2021-40407
Alta · 7.2
KEV Alta · 56 CWE-78 28/01/2022
Reolink RLC-410W IP Camera OS Command Injection Vulnerability
An OS command injection vulnerability exists in the device network settings functionality of reolink RLC-410W v3.0.0.136_20121102. At [1] or [2], based on DDNS type, the ddns->domain variable, that has the value of the domain parameter provided through the SetDdns API, is not validated properly. This would lead to an OS command injection. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2021-22600
Alta · 7.0
KEV Alta · 61 Exploit público CWE-415 26/01/2022
Linux Kernel Privilege Escalation Vulnerability
A double free bug in packet_set_ring() in net/packet/af_packet.c can be exploited by a local user through crafted syscalls to escalate privileges or deny service. We recommend upgrading kernel past the effected versions or rebuilding past ec6af094ea28f0f2dda1a6a33b14cd57e36a9755
CVE-2021-35587
Crítica · 9.8
KEV Urgente · 83 Exploit público CWE-306 19/01/2022
Oracle Fusion Middleware Unspecified Vulnerability
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2022-23227
Crítica · 9.8
KEV Alta · 63 CWE-306 14/01/2022
NUUO NVRmini2 Devices Missing Authentication Vulnerability
NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE-2011-5325), it is possible to overwrite arbitrary files under the web root and achieve code execution as root.
CVE-2022-23134
Média · 5.3
KEV Alta · 63 Exploit público CWE-287 13/01/2022
Zabbix Frontend Improper Access Control Vulnerability
After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Frontend.
CVE-2022-23131
Crítica · 9.8
KEV Urgente · 73 Exploit público CWE-290 13/01/2022
Zabbix Frontend Authentication Bypass Vulnerability
In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).
CVE-2022-21919
Alta · 7.0
KEV Alta · 54 CWE-59 11/01/2022
Microsoft Windows User Profile Service Privilege Escalation Vulnerability
Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2022-21882
Alta · 7.8
KEV Urgente · 84 Exploit público Ransomware CWE-787 11/01/2022
Microsoft Win32k Privilege Escalation Vulnerability
Win32k Elevation of Privilege Vulnerability
CVE-2022-22265
Alta · 7.8
KEV Alta · 46 CWE-703 10/01/2022
Samsung Mobile Devices Use-After-Free Vulnerability
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.
CVE-2021-35247
Média · 5.3
KEV Alta · 51 CWE-20 10/01/2022
SolarWinds Serv-U Improper Input Validation Vulnerability
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.
CVE-2021-44168
Alta · 7.8
KEV Alta · 56 Exploit público CWE-494 04/01/2022
Fortinet FortiOS Arbitrary File Download
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packages.
CVE-2021-44207
Alta · 8.1
KEV Alta · 66 CWE-798 21/12/2021
Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.