Veille CVE

Jeudi 20 octobre 2022

2 CVE

  1. CVE-2022-41352 – Non évaluée Exploitée Rançongiciel

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio package to gain incorrect access to any other user accounts.

  2. CVE-2021-3493 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Privilege Escalation Vulnerability — The overlayfs stacking file system in Linux kernel does not properly validate the application of file capabilities against user namespaces, which could lead to privilege escalation.