CVE Intelligence
Início / CVEs

Vulnerabilidades exploradas (CISA KEV)

CVEs com exploração confirmada pela CISA (Known Exploited Vulnerabilities), com ação exigida e prazos.

Severidade
Limpar

1.760 resultado(s)

Exportar esta busca: RSS · CSV · STIX
CVE-2018-20062 Crítica · 9.8 KEV Urgente · 83 Exploit público 11/12/2018
ThinkPHP "noneCms" Remote Code Execution Vulnerability
An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string.
CVE-2018-17480 Alta · 8.8 KEV Alta · 56 CWE-787 11/12/2018
Google Chromium V8 Out-of-Bounds Write Vulnerability
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-1000861 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-502 10/12/2018
Desserialização de dados não confiáveis no Stapler Web Framework do Jenkins
Existe uma vulnerabilidade de execução de código no framework web Stapler usado pelo Jenkins 2.153 e anteriores, e pelo LTS 2.138.3 e anteriores, em stapler/core/src/main/java/org/kohsuke/stapler/MetaClass.java, que permite a atacantes invocar alguns métodos em objetos Java ao acessar URLs criadas de forma específica que não deveriam ser invocadas dessa maneira.
CVE-2018-19410 Crítica · 9.8 KEV Urgente · 73 Exploit público 21/11/2018
Paessler PRTG Network Monitor Local File Inclusion Vulnerability
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local File Inclusion attack, by including /api/addusers and executing it. By providing the 'id' and 'users' parameters, an unauthenticated attacker can create a user with read-write privileges (including administrator).
CVE-2018-6065 Alta · 8.8 KEV Urgente · 70 Exploit público CWE-190 14/11/2018
Google Chromium V8 Integer Overflow Vulnerability
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-17463 Alta · 8.8 KEV Urgente · 76 Exploit público 14/11/2018
Google Chromium V8 Remote Code Execution Vulnerability
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-8589 Alta · 7.8 KEV Alta · 54 13/11/2018
Microsoft Win32k Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CVE-2018-8581 Alta · 7.4 KEV Urgente · 72 Exploit público Ransomware 13/11/2018
Microsoft Exchange Server Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
CVE-2018-14667 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-94 06/11/2018
Injeção de Expression Language no Red Hat JBoss RichFaces
O RichFaces Framework da série 3 até a versão 3.3.4 (inclusive) é vulnerável a injeção de Expression Language (EL) por meio do recurso UserResource. Um atacante remoto e não autenticado poderia explorar isso para executar código arbitrário usando uma cadeia de objetos Java serializados via org.ajax4jsf.resource.UserResource$UriData.
CVE-2018-14558 Crítica · 9.8 KEV Alta · 62 CWE-78 30/10/2018
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06.23_CN(AC10). A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted goform/setUsbUnload request. This occurs because the "formsetUsbUnload" function executes a dosystemCmd function with untrusted input.
CVE-2018-8453 Alta · 7.8 KEV Urgente · 86 Exploit público Ransomware 10/10/2018
Microsoft Win32k Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVE-2018-14634 Alta · 7.8 KEV Alta · 69 Exploit público CWE-190 25/09/2018
Linux Kernel Integer Overflow Vulnerability
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CVE-2018-15961 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-434 25/09/2018
Adobe ColdFusion Unrestricted File Upload Vulnerability
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2018-8440 Alta · 7.8 KEV Urgente · 84 Exploit público Ransomware 12/09/2018
Microsoft Windows Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVE-2018-11776 Alta · 8.1 KEV Urgente · 76 Exploit público 22/08/2018
Apache Struts Remote Code Execution Vulnerability
Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.
CVE-2018-8414 Alta · 8.8 KEV Alta · 62 Exploit público CWE-20 15/08/2018
Microsoft Windows Shell Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10.
CVE-2018-8405 Alta · 7.8 KEV Alta · 64 Ransomware CWE-404 15/08/2018
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8406.
CVE-2018-8406 Alta · 7.8 KEV Alta · 64 Ransomware CWE-404 15/08/2018
Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8400, CVE-2018-8401, CVE-2018-8405.
CVE-2018-8373 Alta · 7.5 KEV Alta · 56 CWE-787 15/08/2018
Microsoft Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.
CVE-2018-15133 Alta · 8.1 KEV Urgente · 76 Exploit público CWE-502 09/08/2018
Desserialização de dados não confiáveis no Laravel Framework
No Laravel Framework até 5.5.40 e de 5.6.x até 5.6.29, a execução remota de código pode ocorrer como resultado de uma chamada unserialize sobre um valor X-XSRF-TOKEN potencialmente não confiável. Isso envolve o método decrypt em Illuminate/Encryption/Encrypter.php e PendingBroadcast em gadgetchains/Laravel/RCE/3/chain.php no phpggc. O atacante precisa conhecer a chave da aplicação, o que normalmente nunca ocorreria, mas poderia acontecer se o atacante tivesse anteriormente acesso privilegiado ou tivesse concluído com sucesso um ataque anterior.
CVE-2018-14933 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-78 04/08/2018
NUUO NVRmini Devices OS Command Injection Vulnerability
upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
CVE-2018-14847 Crítica · 9.1 KEV Urgente · 83 Exploit público CWE-22 02/08/2018
MikroTik Router OS Directory Traversal Vulnerability
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
CVE-2018-7602 Crítica · 9.8 KEV Urgente · 88 Exploit público Ransomware CWE-94 19/07/2018
Execução remota de código no Drupal Core (CVE-2018-7602)
Existe uma vulnerabilidade de execução remota de código em múltiplos subsistemas do Drupal 7.x e 8.x. Isso potencialmente permite que atacantes explorem múltiplos vetores de ataque em um site Drupal, o que pode resultar no comprometimento do site. Esta vulnerabilidade está relacionada ao núcleo do Drupal - Altamente crítica - Execução remota de código - SA-CORE-2018-002. Tanto a SA-CORE-2018-002 quanto esta vulnerabilidade estão sendo exploradas na natureza.
CVE-2018-8298 Alta · 7.5 KEV Alta · 64 Exploit público CWE-843 10/07/2018
Vulnerabilidade de Confusão de Tipo no Mecanismo de Script ChakraCore
Existe uma vulnerabilidade de execução remota de código na forma como o mecanismo de script ChakraCore manipula objetos na memória, também chamada de "Scripting Engine Memory Corruption Vulnerability". Isto afeta o ChakraCore. Este ID de CVE é único em relação a CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.
CVE-2018-5002 Alta · 7.8 KEV Alta · 56 CWE-787 09/07/2018
Adobe Flash Player Stack-based Buffer Overflow Vulnerability
Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.