Veille CVE

Lundi 7 mars 2022

11 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 11 Tri : plus récentes
  1. CVE-2022-26486 – Non évaluée Exploitée

    Mozilla Firefox

    Mozilla Firefox Use-After-Free Vulnerability — Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

  2. CVE-2022-26485 – Non évaluée Exploitée

    Mozilla Firefox

    Mozilla Firefox Use-After-Free Vulnerability — Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

  3. CVE-2021-21973 – Non évaluée Exploitée

    VMware vCenter Server and Cloud Foundation

    VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability — VMware vCenter Server and Cloud Foundation Server contain a SSRF vulnerability due to improper validation of URLs in a vCenter Server plugin. This allows for information disclosure.

  4. CVE-2020-8218 – Non évaluée Exploitée

    Pulse Secure Pulse Connect Secure

    Pulse Connect Secure Code Injection Vulnerability — A code injection vulnerability exists in Pulse Connect Secure that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

  5. CVE-2019-11581 – Non évaluée Exploitée

    Atlassian Jira Server and Data Center

    Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability — Atlassian Jira Server and Data Center contain a server-side template injection vulnerability which can allow for remote code execution.

  6. CVE-2017-6077 – Non évaluée Exploitée

    NETGEAR Wireless Router DGN2200

    NETGEAR DGN2200 Remote Code Execution Vulnerability — NETGEAR DGN2200 wireless routers contain a vulnerability that allows for remote code execution.

  7. CVE-2016-6277 – Non évaluée Exploitée

    NETGEAR Multiple Routers

    NETGEAR Multiple Routers Remote Code Execution Vulnerability — NETGEAR confirmed multiple routers allow unauthenticated web pages to pass form input directly to the command-line interface, permitting remote code execution.

  8. CVE-2013-0631 – Non évaluée Exploitée

    Adobe ColdFusion

    Adobe ColdFusion Information Disclosure Vulnerability — Adobe Coldfusion contains an unspecified vulnerability, which could result in information disclosure from a compromised server.

  9. CVE-2013-0629 – Non évaluée Exploitée

    Adobe ColdFusion

    Adobe ColdFusion Directory Traversal Vulnerability — Adobe Coldfusion contains a directory traversal vulnerability, which could permit an unauthorized user access to restricted directories.

  10. CVE-2013-0625 – Non évaluée Exploitée

    Adobe ColdFusion

    Adobe ColdFusion Authentication Bypass Vulnerability — Adobe Coldfusion contains an authentication bypass vulnerability, which could result in an unauthorized user gaining administrative access.

  11. CVE-2009-3960 – Non évaluée Exploitée Rançongiciel

    Adobe BlazeDS

    Adobe BlazeDS Information Disclosure Vulnerability — Adobe BlazeDS, which is utilized in LifeCycle and Coldfusion, contains a vulnerability that allows for information disclosure.