Veille CVE

Semaine du 8 août au 14 août 2022

4 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2022-27925 7.2 Élevée Exploitée Rançongiciel

    Synacor zimbra collaboration suite

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal.

  2. CVE-2022-37042 – Non évaluée Exploitée Rançongiciel

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.

  3. CVE-2022-34713 – Non évaluée Exploitée

    Microsoft Windows

    Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability — A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.

  4. CVE-2022-30333 – Non évaluée Exploitée Rançongiciel

    RARLAB UnRAR

    RARLAB UnRAR Directory Traversal Vulnerability — RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.