Vulnerabilidades exploradas (CISA KEV)

CVE-2021-27059 Alta · 7.6 KEV Alta · 55 11/03/2021

Microsoft Office Remote Code Execution Vulnerability

CVE-2021-26411 Alta · 8.8 KEV Urgente · 82 Exploit público Ransomware CWE-416 11/03/2021

Microsoft Internet Explorer Memory Corruption Vulnerability

Internet Explorer Memory Corruption Vulnerability

CVE-2021-21166 Alta · 8.8 KEV Alta · 56 CWE-362 09/03/2021

Google Chromium Race Condition Vulnerability

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-25337 Alta · 7.1 KEV Alta · 60 Exploit público CWE-269 04/03/2021

Samsung Mobile Devices Improper Access Control Vulnerability

Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.

CVE-2021-22681 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-522 03/03/2021

Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800.

CVE-2021-26857 Alta · 7.8 KEV Urgente · 82 Exploit público Ransomware CWE-502 02/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27065 Alta · 7.8 KEV Urgente · 99 Exploit público Ransomware CWE-22 02/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-26858 Alta · 7.8 KEV Urgente · 79 Ransomware 02/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-26855 Crítica · 9.1 KEV Urgente · 100 Exploit público Ransomware CWE-918 02/03/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27878 Alta · 8.8 KEV Urgente · 78 Exploit público Ransomware 01/03/2021

Veritas Backup Exec Agent Command Execution Vulnerability

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. The attacker could use one of these commands to execute an arbitrary command on the system using system privileges.

CVE-2021-27877 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware 01/03/2021

Veritas Backup Exec Agent Improper Authentication Vulnerability

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands.

CVE-2021-27876 Alta · 8.1 KEV Urgente · 83 Exploit público Ransomware 01/03/2021

Veritas Backup Exec Agent File Access Vulnerability

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. By using crafted input parameters in one of these commands, an attacker can access an arbitrary file on the system using System privileges.

CVE-2021-1732 Alta · 7.8 KEV Urgente · 94 Exploit público Ransomware CWE-787 25/02/2021

Microsoft Win32k Privilege Escalation Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

CVE-2021-21972 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-22 24/02/2021

VMware vCenter Server Remote Code Execution Vulnerability

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

CVE-2021-21973 Média · 5.3 KEV Alta · 66 Exploit público CWE-918 24/02/2021

VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability

The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2).

CVE-2021-27103 Crítica · 9.8 KEV Alta · 69 Ransomware CWE-918 16/02/2021

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.

CVE-2021-27101 Crítica · 9.8 KEV Urgente · 75 Exploit público Ransomware 16/02/2021

Accellion FTA SQL Injection Vulnerability

Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later.

CVE-2021-27102 Alta · 7.8 KEV Alta · 64 Ransomware CWE-78 16/02/2021

Accellion FTA OS Command Injection Vulnerability

Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later.

CVE-2021-27104 Crítica · 9.8 KEV Urgente · 70 Ransomware CWE-78 16/02/2021

Accellion FTA OS Command Injection Vulnerability

Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.

CVE-2021-21315 Alta · 7.8 KEV Alta · 66 Exploit público CWE-78 16/02/2021

Injeção de Comando do Sistema na System Information Library para Node.js

A System Information Library para Node.JS (pacote npm "systeminformation") é uma coleção de código aberto de funções para obter informações detalhadas sobre hardware, sistema e SO. No systeminformation anterior à versão 5.3.1 há uma vulnerabilidade de injeção de comando. O problema foi corrigido na versão 5.3.1. Como alternativa à atualização, verifique ou sanitize os parâmetros de serviço passados para si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... permita apenas strings e rejeite quaisquer arrays. A sanitização de strings funciona como esperado.

CVE-2021-25298 Alta · 8.8 KEV Urgente · 72 Exploit público CWE-78 15/02/2021

Nagios XI OS Command Injection

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.

CVE-2021-25297 Alta · 8.8 KEV Urgente · 72 Exploit público CWE-78 15/02/2021

Nagios XI OS Command Injection

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.

CVE-2021-25296 Alta · 8.8 KEV Urgente · 72 Exploit público 15/02/2021

Nagios XI OS Command Injection

Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server.

CVE-2021-21311 Alta · 7.2 KEV Alta · 69 Exploit público CWE-918 11/02/2021

Adminer Server-Side Request Forgery Vulnerability

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

CVE-2021-21017 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 11/02/2021

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.