Vulnerabilities in Talos

127 results
Vexday analysis

Com 127 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, a taxa de exploração ativa da Talos situa-se abaixo da média geral do catálogo, o que indica menor pressão de ameaças ativas no momento. No entanto, 36 vulnerabilidades classificadas como críticas representam uma superfície de risco considerável que merece atenção contínua. O tipo de falha mais recorrente é CWE-416 (Use-After-Free), categoria que historicamente favorece execução de código arbitrário e elevação de privilégios. A CVE mais perigosa identificada atualmente é CVE-2018-3949, com score EPSS de 0,533 — valor que indica probabilidade relevante de exploração —, sendo também a única com prova de conceito pública disponível, o que a torna prioritária para equipes de resposta.

CVE-2018-3949HIGHAn exploitable information disclosure vulnerability exists in the HTTP server functionality of the TP-Link TL-R600VPN. A specially crafted UEPSS 53.3%CVE-2017-12128MEDIUMAn exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A speciallEPSS 43.4%CVE-2017-14463CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 38.2%CVE-2017-14470CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14469CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14473CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14466CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14472CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14471CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14464CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14468CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 37.3%CVE-2017-14467CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 36.6%CVE-2017-14462CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 34.2%CVE-2017-14465CRITICALAn exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley MicrolEPSS 34.2%CVE-2018-3843MEDIUMAn exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotatiEPSS 24.0%CVE-2017-14459CRITICALAn exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEPSS 12.8%CVE-2018-3937CRITICALAn exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 fEPSS 9.6%CVE-2017-12093MEDIUMAn exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 SEPSS 6.2%CVE-2017-14475CRITICALIn the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (for Linux), a specialEPSS 6.2%CVE-2017-14474CRITICALIn the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, a specially crafted MMM protEPSS 6.2%