Veille CVE

Semaine du 5 septembre au 11 septembre 2022

11 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 11 Tri : plus récentes
  1. CVE-2022-3075 – Non évaluée Exploitée

    Google Chromium Mojo

    Google Chromium Mojo Insufficient Data Validation Vulnerability — Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  2. CVE-2022-27593 – Non évaluée Exploitée Rançongiciel

    QNAP Photo Station

    QNAP Photo Station Externally Controlled Reference Vulnerability — Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.

  3. CVE-2022-26258 – Non évaluée Exploitée

    D-Link DIR-820L

    D-Link DIR-820L Remote Code Execution Vulnerability — D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

  4. CVE-2020-9934 – Non évaluée Exploitée

    Apple iOS, iPadOS, and macOS

    Apple iOS, iPadOS, and macOS Input Validation Vulnerability — Apple iOS, iPadOS, and macOS contain an unspecified vulnerability involving input validation which can allow a local attacker to view sensitive user information.

  5. CVE-2018-7445 – Non évaluée Exploitée

    MikroTik RouterOS

    MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability — In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

  6. CVE-2018-6530 – Non évaluée Exploitée Rançongiciel

    D-Link Multiple Routers

    D-Link Multiple Routers OS Command Injection Vulnerability — Multiple D-Link routers contain an unspecified vulnerability that allows for execution of OS commands.

  7. CVE-2018-2628 – Non évaluée Exploitée

    Oracle WebLogic Server

    Oracle WebLogic Server Unspecified Vulnerability — Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

  8. CVE-2018-13374 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiOS and FortiADC

    Fortinet FortiOS and FortiADC Improper Access Control Vulnerability — Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.

  9. CVE-2017-5521 – Non évaluée Exploitée

    NETGEAR Multiple Devices

    NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability — Multiple NETGEAR devices are prone to admin password disclosure via simple crafted requests to the web management server.

  10. CVE-2011-4723 – Non évaluée Exploitée

    D-Link DIR-300 Router

    D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability — The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information.

  11. CVE-2011-1823 – Non évaluée Exploitée

    Android Android OS

    Android OS Privilege Escalation Vulnerability — The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.