Veille CVE

Janvier 2023

5 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2017-11357 9.8 Critique Exploitée Rançongiciel

    Progress telerik ui for asp.net ajax

    Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

  2. CVE-2022-47966 – Non évaluée Exploitée Rançongiciel

    Zoho ManageEngine

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability — Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

  3. CVE-2022-44877 – Non évaluée Exploitée

    CWP Control Web Panel

    CWP Control Web Panel OS Command Injection Vulnerability — CWP Control Web Panel (formerly CentOS Web Panel) contains an OS command injection vulnerability that allows remote attackers to execute commands via shell metacharacters in the login parameter.

  4. CVE-2023-21674 8.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  5. CVE-2022-41080 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.