Vulnerabilidades exploradas (CISA KEV)

CVE-2021-21311 Alta · 7.2 KEV Alta · 69 Exploit público CWE-918 11/02/2021

Adminer Server-Side Request Forgery Vulnerability

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.

CVE-2021-21017 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 11/02/2021

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2021-23874 Alta · 7.8 KEV Alta · 51 CWE-732 10/02/2021

McAfee Total Protection (MTP) Improper Privilege Management Vulnerability

Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense.

CVE-2021-21148 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 09/02/2021

Google Chromium V8 Heap Buffer Overflow Vulnerability

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-22502 Crítica · 9.8 KEV Urgente · 79 Exploit público CWE-78 08/02/2021

Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability

Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

CVE-2021-20016 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-89 04/02/2021

SonicWall SSLVPN SMA100 SQL Injection Vulnerability

A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.

CVE-2020-2506 Crítica · 9.8 KEV Alta · 60 CWE-284 03/02/2021

QNAP Helpdesk Improper Access Control Vulnerability

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

CVE-2020-25506 Crítica · 9.8 KEV Alta · 67 Exploit público CWE-78 02/02/2021

D-Link DNS-320 Device Command Injection Vulnerability

D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

CVE-2020-29557 Crítica · 9.8 KEV Alta · 63 CWE-119 29/01/2021

D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.

CVE-2021-3156 Alta · 7.8 KEV Urgente · 76 Exploit público CWE-193 26/01/2021

Sudo Heap-Based Buffer Overflow Vulnerability

Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character.

CVE-2021-3199 Crítica · 9.8 KEV Alta · 63 CWE-22 26/01/2021

ONLYOFFICE Docs Server Path Traversal Vulnerability

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.

CVE-2020-36193 Alta · 7.5 KEV Alta · 59 CWE-22 18/01/2021

PEAR Archive_Tar Improper Link Resolution Vulnerability

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

CVE-2020-6572 Alta · 8.8 KEV Alta · 55 CWE-416 14/01/2021

Google Chrome Media Use-After-Free Vulnerability

Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVE-2021-1647 Alta · 7.8 KEV Alta · 62 Exploit público 12/01/2021

Microsoft Defender Remote Code Execution Vulnerability

CVE-2021-3129 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware 12/01/2021

Execução remota de código no Laravel Ignition por tratamento inseguro de arquivos

O Ignition anterior à 2.5.2, utilizado no Laravel e em outros produtos, permite que atacantes remotos não autenticados executem código arbitrário devido ao uso inseguro de file_get_contents() e file_put_contents(). Isso é explorável em sites que utilizam o modo de depuração (debug) com Laravel anterior à 8.4.2.

CVE-2020-16013 Alta · 8.8 KEV Alta · 54 CWE-787 08/01/2021

Implementação inadequada no V8 do Google Chrome com corrupção de heap (CVE-2020-16013)

Implementação inadequada no V8 do Google Chrome anterior à 86.0.4240.198 permitiu que um atacante remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada especialmente.

CVE-2020-16017 Crítica · 9.6 KEV Alta · 58 CWE-416 08/01/2021

Vulnerabilidade de Use-After-Free no Isolamento de Sites do Google Chrome (CVE-2020-16017)

Use após liberação (use after free) no componente de isolamento de sites (site isolation) do Google Chrome anterior a 86.0.4240.198 permitiu que um atacante remoto que já tivesse comprometido o processo renderizador potencialmente realizasse uma fuga do sandbox por meio de uma página HTML elaborada.

CVE-2020-17519 Alta · 7.5 KEV Urgente · 79 Exploit público CWE-552 05/01/2021

Apache Flink Improper Access Control Vulnerability

A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users should upgrade to Flink 1.11.3 or 1.12.0 if their Flink instance(s) are exposed. The issue was fixed in commit b561010b0ee741543c3953306037f00d7a9f0801 from apache/flink:master.

CVE-2020-10148 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-306 29/12/2020

SolarWinds Orion Authentication Bypass Vulnerability

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.

CVE-2020-35730 Média · 6.1 KEV Alta · 59 Exploit público CWE-79 28/12/2020

Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message, with JavaScript in a link reference element that is mishandled by linkref_addindex in rcube_string_replacer.php.

CVE-2020-29583 Crítica · 9.8 KEV Urgente · 73 Exploit público CWE-522 22/12/2020

Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability

Firmware version 4.60 of Zyxel USG devices contains an undocumented account (zyfwp) with an unchangeable password. The password for this account can be found in cleartext in the firmware. This account can be used by someone to login to the ssh server or web interface with admin privileges.

CVE-2020-29574 Crítica · 9.8 KEV Urgente · 72 Ransomware CWE-89 11/12/2020

CyberoamOS (CROS) SQL Injection Vulnerability

An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.

CVE-2020-17530 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-917 10/12/2020

Execução remota de código por avaliação forçada de OGNL no Apache Struts (CVE-2020-17530)

Avaliação forçada de OGNL, quando realizada sobre entrada bruta do usuário em atributos de tags, pode levar à execução remota de código. Software afetado: Apache Struts 2.0.0 - Struts 2.5.25.

CVE-2020-17144 Alta · 8.4 KEV Alta · 65 Exploit público CWE-502 09/12/2020

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Remote Code Execution Vulnerability

CVE-2020-27932 Alta · 7.8 KEV Alta · 55 CWE-843 08/12/2020

Apple Multiple Products Type Confusion Vulnerability

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.