Veille CVE

Lundi 10 janvier 2022

15 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 15 Tri : plus récentes
  1. CVE-2021-36260 – Non évaluée Exploitée

    Hikvision Security cameras web server

    Hikvision Improper Input Validation — A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.

  2. CVE-2021-27860 – Non évaluée Exploitée

    FatPipe WARP, IPVPN, and MPVPN software

    FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit — A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software allows a remote, unauthenticated attacker to upload a file to any location on the filesystem.

  3. CVE-2021-22017 – Non évaluée Exploitée

    VMware vCenter Server

    VMware vCenter Server Improper Access Control — Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.

  4. CVE-2020-6572 – Non évaluée Exploitée

    Google Chrome Media

    Google Chrome Media Use-After-Free Vulnerability — Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page.

  5. CVE-2019-9670 – Non évaluée Exploitée

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference — Synacor Zimbra Collaboration Suite (ZCS) contains an improper restriction of XML external entity (XXE) vulnerability in the mailboxd component.

  6. CVE-2019-7609 – Non évaluée Exploitée

    Elastic Kibana

    Kibana Arbitrary Code Execution — Kibana contain an arbitrary code execution flaw in the Timelion visualizer.

  7. CVE-2019-2725 – Non évaluée Exploitée Rançongiciel

    Oracle WebLogic Server

    Oracle WebLogic Server, Injection — Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

  8. CVE-2019-1579 – Non évaluée Exploitée Rançongiciel

    Palo Alto Networks PAN-OS

    Palo Alto Networks PAN-OS Remote Code Execution Vulnerability — Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.

  9. CVE-2019-1458 – Non évaluée Exploitée Rançongiciel

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP.

  10. CVE-2019-10149 – Non évaluée Exploitée

    Exim Mail Transfer Agent (MTA)

    Exim Mail Transfer Agent (MTA) Improper Input Validation — Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

  11. CVE-2018-13383 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiOS and FortiProxy

    Fortinet FortiOS and FortiProxy Out-of-bounds Write — A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.

  12. CVE-2018-13382 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiOS and FortiProxy

    Fortinet FortiOS and FortiProxy Improper Authorization — An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.

  13. CVE-2017-1000486 – Non évaluée Exploitée

    Primetek Primefaces Application

    Primetek Primefaces Remote Code Execution Vulnerability — Primetek Primefaces is vulnerable to a weak encryption flaw resulting in remote code execution

  14. CVE-2015-7450 – Non évaluée Exploitée

    IBM WebSphere Application Server and Server Hypervisor Edition

    IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. — Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands

  15. CVE-2013-3900 – Non évaluée Exploitée

    Microsoft WinVerifyTrust function

    Microsoft WinVerifyTrust function Remote Code Execution — A remote code execution vulnerability exists in the way that the WinVerifyTrust function handles Windows Authenticode signature verification for PE files.