Veille CVE

Vendredi 10 mars 2023

2 CVE

  1. CVE-2021-39144 – Non évaluée Exploitée

    XStream XStream

    XStream Remote Code Execution Vulnerability — XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

  2. CVE-2020-5741 – Non évaluée Exploitée

    Plex Media Server

    Plex Media Server Remote Code Execution Vulnerability — Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.