Veille CVE

Jeudi 22 juin 2023

6 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 6 Tri : plus récentes
  1. CVE-2023-20887 – Non évaluée Exploitée

    VMware Aria Operations for Networks

    Vmware Aria Operations for Networks Command Injection Vulnerability — VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

  2. CVE-2021-44026 – Non évaluée Exploitée

    Roundcube Roundcube Webmail

    Roundcube Webmail SQL Injection Vulnerability — Roundcube Webmail is vulnerable to SQL injection via search or search_params.

  3. CVE-2020-35730 – Non évaluée Exploitée

    Roundcube Roundcube Webmail

    Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability — Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows an attacker to send a plain text e-mail message with Javascript in a link reference element that is mishandled by linkref_addinindex in rcube_string_replacer.php.

  4. CVE-2020-12641 – Non évaluée Exploitée

    Roundcube Roundcube Webmail

    Roundcube Webmail Remote Code Execution Vulnerability — Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

  5. CVE-2016-9079 – Non évaluée Exploitée

    Mozilla Firefox, Firefox ESR, and Thunderbird

    Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability — Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.

  6. CVE-2016-0165 – Non évaluée Exploitée

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.