Semaine du 25 avril au 1 mai 2022

WSO2 Multiple Products

WSO2 Multiple Products Unrestrictive Upload of File Vulnerability — Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

Microsoft Windows

Microsoft Windows User Profile Service Privilege Escalation Vulnerability — Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Windows

Microsoft Windows User Profile Service Privilege Escalation Vulnerability — Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Linux Kernel

Linux Kernel Privilege Escalation Vulnerability — Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

Microsoft Win32k

Microsoft Win32k Privilege Escalation Vulnerability — Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Microsoft Win32k

Microsoft Win32k Privilege Escalation Vulnerability — Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Jenkins Script Security Plugin

Jenkins Script Security Plugin Sandbox Bypass Vulnerability — Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.