Veille CVE

Janvier 2023

5 CVE

Critique 2 Élevée 1 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2017-11357 9.8 Critique Exploitée Rançongiciel

    Progress telerik ui for asp.net ajax

    Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

  2. CVE-2022-47966 – Non évaluée Exploitée Rançongiciel

    Zoho ManageEngine

    Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability — Multiple Zoho ManageEngine products contain an unauthenticated remote code execution vulnerability due to the usage of an outdated third-party dependency, Apache Santuario.

  3. CVE-2022-44877 9.8 Critique Exploitée

    Control-webpanel webpanel

    login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.

  4. CVE-2023-21674 8.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  5. CVE-2022-41080 – Non évaluée Exploitée Rançongiciel

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.