Veille CVE

Semaine du 6 mars au 12 mars 2023

5 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 5 Tri : plus récentes
  1. CVE-2021-39144 – Non évaluée Exploitée

    XStream XStream

    XStream Remote Code Execution Vulnerability — XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

  2. CVE-2020-5741 – Non évaluée Exploitée

    Plex Media Server

    Plex Media Server Remote Code Execution Vulnerability — Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

  3. CVE-2022-35914 – Non évaluée Exploitée

    Teclib GLPI

    Teclib GLPI Remote Code Execution Vulnerability — Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed.

  4. CVE-2022-33891 – Non évaluée Exploitée

    Apache Spark

    Apache Spark Command Injection Vulnerability — Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled.

  5. CVE-2022-28810 – Non évaluée Exploitée

    Zoho ManageEngine

    Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability — Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset.