Veille CVE

Mai 2022

83 CVE

Critique 10 Élevée 30 Moyenne 10 Faible 0 Non évaluée 33 Tri : plus récentes
  1. CVE-2019-3010 8.8 Élevée Exploitée

    Oracle Corporation Solaris Operating System · Oracle solaris

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

  2. CVE-2016-7256 8.8 Élevée Exploitée

    Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607 · Microsoft windows 7

    atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Open Type Font Remote Code Execution Vulnerability."

  3. CVE-2016-3393 7.8 Élevée Exploitée

    Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607 · Microsoft windows 7

    Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Component RCE Vulnerability."

  4. CVE-2016-1010 8.8 Élevée Exploitée

    Adobe flash player · Adobe air · Adobe air sdk · Samsung x14j firmware

    Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176, Adobe AIR SDK before 21.0.0.176, and Adobe AIR SDK & Compiler before 21.0.0.176 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-0963 and CVE-2016-0993.

  5. CVE-2016-0034 8.8 Élevée Exploitée Rançongiciel

    Microsoft silverlight

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."

  6. CVE-2015-8651 8.8 Élevée Exploitée

    Adobe air sdk · Adobe air sdk \& compiler · Adobe flash player · Adobe air

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.

  7. CVE-2015-6175 7.8 Élevée Exploitée

    Microsoft windows 10 1507

    The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."

  8. CVE-2015-4495 8.8 Élevée Exploitée

    Mozilla firefox · Mozilla firefox os · Oracle solaris · Canonical ubuntu linux

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

  9. CVE-2015-2425 8.8 Élevée Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.

  10. CVE-2015-2360 8.8 Élevée Exploitée

    Microsoft windows 7 · Microsoft windows 8 · Microsoft windows 8.1 · Microsoft windows rt

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."

  11. CVE-2015-1671 7.8 Élevée Exploitée

    Microsoft .net framework · Microsoft live meeting · Microsoft lync · Microsoft silverlight

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

  12. CVE-2015-0071 6.5 Moyenne Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

  13. CVE-2015-0310 7.8 Élevée Exploitée

    Adobe flash player

    Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.

  14. CVE-2014-4123 8.8 Élevée Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," as exploited in the wild in October 2014, a different vulnerability than CVE-2014-4124.

  15. CVE-2014-2817 8.8 Élevée Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."

  16. CVE-2014-0546 9.8 Critique Exploitée

    Adobe acrobat · Adobe acrobat reader

    Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via unspecified vectors.

  17. CVE-2013-7331 6.5 Moyenne Exploitée

    Microsoft internet explorer

    The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.

  18. CVE-2013-3896 5.5 Moyenne Exploitée

    Microsoft silverlight

    Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

  19. CVE-2013-0074 7.8 Élevée Exploitée Rançongiciel

    Microsoft silverlight

    Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to execute arbitrary code via a crafted Silverlight application, aka "Silverlight Double Dereference Vulnerability."

  20. CVE-2013-0422 9.8 Critique Exploitée Rançongiciel

    Oracle jdk · Oracle jre · Canonical ubuntu linux · Opensuse opensuse

    Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.

  21. CVE-2012-1710 9.8 Critique Exploitée Rançongiciel

    Oracle fusion middleware

    Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709.

  22. CVE-2010-1428 7.5 Élevée Exploitée Rançongiciel

    Redhat jboss enterprise application platform

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

  23. CVE-2010-0840 9.8 Critique Exploitée

    Oracle jre · Opensuse opensuse · Canonical ubuntu linux

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

  24. CVE-2016-0984 – Non évaluée Exploitée

    Adobe Flash Player and AIR

    Adobe Flash Player and AIR Use-After-Free Vulnerability — Use-after-free vulnerability in Adobe Flash Player and Adobe AIR allows attackers to execute code.

  25. CVE-2015-1769 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Mount Manager Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows Mount Manager component improperly processes symbolic links.

  26. CVE-2015-0016 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows TS WebProxy Directory Traversal Vulnerability — Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.

  27. CVE-2014-8439 – Non évaluée Exploitée

    Adobe Flash Player

    Adobe Flash Player Dereferenced Pointer Vulnerability — Adobe Flash Player has a vulnerability in the way it handles a dereferenced memory pointer which could lead to code execution.

  28. CVE-2014-4148 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Remote Code Execution Vulnerability — A remote code execution vulnerability exists when the Windows kernel-mode driver improperly handles TrueType fonts.

  29. CVE-2014-4077 – Non évaluée Exploitée

    Microsoft Input Method Editor (IME) Japanese

    Microsoft IME Japanese Privilege Escalation Vulnerability — Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation.

  30. CVE-2014-3153 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Privilege Escalation Vulnerability — The futex_requeue function in kernel/futex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.

  31. CVE-2013-3993 – Non évaluée Exploitée Rançongiciel

    IBM InfoSphere BigInsights

    IBM InfoSphere BigInsights Invalid Input Vulnerability — Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.

  32. CVE-2013-2423 – Non évaluée Exploitée

    Oracle Java Runtime Environment (JRE)

    Oracle JRE Unspecified Vulnerability — Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.

  33. CVE-2013-0431 – Non évaluée Exploitée Rançongiciel

    Oracle Java Runtime Environment (JRE)

    Oracle JRE Sandbox Bypass Vulnerability — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.

  34. CVE-2010-0738 – Non évaluée Exploitée Rançongiciel

    Red Hat JBoss

    Red Hat JBoss Authentication Bypass Vulnerability — The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.

  35. CVE-2018-19953 6.1 Moyenne Exploitée Rançongiciel

    QNAP Systems Inc. QTS · Qnap qts

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.

  36. CVE-2018-19949 9.8 Critique Exploitée Rançongiciel

    QNAP Systems Inc. QTS · Qnap qts

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.

  37. CVE-2018-19943 5.4 Moyenne Exploitée Rançongiciel

    QNAP Systems Inc. QTS · Qnap qts

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS 4.3.4.1282 build 20200408 and later QTS 4.3.3.1252 build 20200409 and later QTS 4.2.6 build 20200421 and later

  38. CVE-2017-18362 9.8 Critique Exploitée Rançongiciel

    Connectwise manageditsync

    ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asmx page is available via the Kaseya VSA web interface, anyone with access to the page is able to run arbitrary SQL queries, both read and write, without authentication.

  39. CVE-2018-8611 7.8 Élevée Exploitée

    Microsoft Windows 7 · Microsoft Windows Server 2012 R2 · Microsoft Windows RT 8.1 · Microsoft Windows Server 2008

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

  40. CVE-2017-8543 9.8 Critique Exploitée

    Microsoft Corporation Microsoft Windows · Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to take control of the affected system when Windows Search fails to handle objects in memory, aka "Windows Search Remote Code Execution Vulnerability".

  41. CVE-2017-8291 7.8 Élevée Exploitée

    Artifex ghostscript · Debian debian linux · Redhat enterprise linux desktop · Redhat enterprise linux eus

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

  42. CVE-2017-0210 8.8 Élevée Exploitée

    Microsoft Corporation Internet Explorer · Microsoft internet explorer

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

  43. CVE-2017-0149 8.8 Élevée Exploitée

    Microsoft Corporation Internet Explorer · Microsoft internet explorer

    Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0018 and CVE-2017-0037.

  44. CVE-2017-0147 7.5 Élevée Exploitée Rançongiciel

    Microsoft Corporation Windows SMB · Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607

    The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a crafted packets, aka "Windows SMB Information Disclosure Vulnerability."

  45. CVE-2017-0022 6.5 Moyenne Exploitée

    Microsoft Corporation XML Core Services · Microsoft xml core services · Microsoft windows 8.1 · Microsoft windows server 2008

    Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for files on disk via a crafted web site, aka "Microsoft XML Information Disclosure Vulnerability."

  46. CVE-2017-0005 7.8 Élevée Exploitée

    Microsoft Corporation Windows GDI · Microsoft windows 10 1507 · Microsoft windows 10 1511 · Microsoft windows 10 1607

    The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0001, CVE-2017-0025, and CVE-2017-0047.

  47. CVE-2016-3298 6.5 Moyenne Exploitée

    Microsoft internet explorer · Microsoft windows 7 · Microsoft windows server 2008 · Microsoft windows vista

    Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability."

  48. CVE-2016-3351 6.5 Moyenne Exploitée Rançongiciel

    Microsoft internet explorer · Microsoft edge

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

  49. CVE-2016-4657 8.8 Élevée Exploitée

    Apple iphone os

    WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

  50. CVE-2016-4656 7.8 Élevée Exploitée

    Apple iphone os

    The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

  51. CVE-2016-4655 5.5 Moyenne Exploitée

    Apple iphone os

    The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

  52. CVE-2016-6367 7.8 Élevée Exploitée

    Cisco adaptive security appliance software

    Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

  53. CVE-2016-6366 8.8 Élevée Exploitée

    Cisco pix firewall software · Cisco adaptive security appliance software · Cisco asa 1000v cloud firewall software

    Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

  54. CVE-2016-0162 4.3 Moyenne Exploitée

    Microsoft internet explorer

    Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

  55. CVE-2022-20821 – Non évaluée Exploitée

    Cisco IOS XR

    Cisco IOS XR Open Port Vulnerability — Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

  56. CVE-2021-30883 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for remote code execution.

  57. CVE-2021-1048 – Non évaluée Exploitée

    Android Kernel

    Android Kernel Use-After-Free Vulnerability — Android kernel contains a use-after-free vulnerability that allows for privilege escalation.

  58. CVE-2021-0920 – Non évaluée Exploitée

    Android Kernel

    Android Kernel Race Condition Vulnerability — Android kernel contains a race condition, which allows for a use-after-free vulnerability. Exploitation can allow for privilege escalation.

  59. CVE-2020-1027 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Kernel Privilege Escalation Vulnerability — An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

  60. CVE-2020-0638 – Non évaluée Exploitée Rançongiciel

    Microsoft Update Notification Manager

    Microsoft Update Notification Manager Privilege Escalation Vulnerability — Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

  61. CVE-2019-8720 – Non évaluée Exploitée

    WebKitGTK WebKitGTK

    WebKitGTK Memory Corruption Vulnerability — WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.

  62. CVE-2019-7287 – Non évaluée Exploitée

    Apple iOS

    Apple iOS Memory Corruption Vulnerability — Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution.

  63. CVE-2019-7286 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, macOS, watchOS, and tvOS contain a memory corruption vulnerability that could allow for privilege escalation.

  64. CVE-2019-5786 – Non évaluée Exploitée

    Google Chrome Blink

    Google Chrome Blink Use-After-Free Vulnerability — Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page.

  65. CVE-2019-18426 – Non évaluée Exploitée

    Meta Platforms WhatsApp

    WhatsApp Cross-Site Scripting Vulnerability — A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading.

  66. CVE-2019-1385 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.

  67. CVE-2019-13720 – Non évaluée Exploitée

    Google Chrome WebAudio

    Google Chrome WebAudio Use-After-Free Vulnerability — Google Chrome WebAudio contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  68. CVE-2019-11708 – Non évaluée Exploitée

    Mozilla Firefox and Thunderbird

    Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability — Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.

  69. CVE-2019-11707 – Non évaluée Exploitée

    Mozilla Firefox and Thunderbird

    Mozilla Firefox and Thunderbird Type Confusion Vulnerability — Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

  70. CVE-2019-1130 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links.

  71. CVE-2019-0880 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Privilege Escalation Vulnerability — A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity.

  72. CVE-2019-0703 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows SMB Information Disclosure Vulnerability — An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, which could lead to information disclosure from the server.

  73. CVE-2019-0676 – Non évaluée Exploitée

    Microsoft Internet Explorer

    Microsoft Internet Explorer Information Disclosure Vulnerability — An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited this vulnerability could test for the presence of files on disk.

  74. CVE-2018-8589 – Non évaluée Exploitée

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows improperly handles calls to Win32k.sys. An attacker who successfully exploited this vulnerability could run remote code in the security context of the local system.

  75. CVE-2018-5002 – Non évaluée Exploitée

    Adobe Flash Player

    Adobe Flash Player Stack-based Buffer Overflow Vulnerability — Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.

  76. CVE-2022-30525 9.8 Critique Exploitée

    Zyxel USG FLEX 100(W) firmware · Zyxel USG FLEX 200 firmware · Zyxel USG FLEX 500 firmware · Zyxel USG FLEX 700 firmware

    A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 700 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 50(W) firmware versions 5.10 through 5.21 Patch 1, USG20(W)-VPN firmware versions 5.10 through 5.21 Patch 1, ATP series firmware versions 5.10 through 5.21 Patch 1, VPN series firmware versions 4.60 through 5.21 Patch 1, which could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

  77. CVE-2022-22947 10.0 Critique Exploitée

    Spring Cloud Gateway · Vmware spring cloud gateway · Oracle commerce guided search · Oracle communications cloud native core binding support function

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.

  78. CVE-2022-1388 9.8 Critique Exploitée Rançongiciel

    F5 BIG-IP · F5 big-ip access policy manager · F5 big-ip advanced firewall manager · F5 big-ip analytics

    On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

  79. CVE-2021-1789 8.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple macOS · Apple ipados · Apple iphone os

    A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.

  80. CVE-2019-8506 8.8 Élevée Exploitée

    Apple iOS · Apple tvOS · Apple watchOS · Apple Safari

    A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

  81. CVE-2014-0160 7.5 Élevée Exploitée

    Openssl openssl · Filezilla-project filezilla server · Siemens application processing engine firmware · Siemens cp 1543-1 firmware

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.

  82. CVE-2014-0322 8.8 Élevée Exploitée

    Microsoft internet explorer

    Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014.

  83. CVE-2014-4113 – Non évaluée Exploitée

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.