Veille CVE

Semaine du 22 avril au 28 avril 2024

4 CVE

  1. CVE-2024-4040 – Non évaluée Exploitée

    CrushFTP CrushFTP

    CrushFTP VFS Sandbox Escape Vulnerability — CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS).

  2. CVE-2024-20359 – Non évaluée Exploitée

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Cisco ASA and FTD Privilege Escalation Vulnerability — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escalation vulnerability that can allow local privilege escalation from Administrator to root.

  3. CVE-2024-20353 – Non évaluée Exploitée

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Cisco ASA and FTD Denial of Service Vulnerability — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an infinite loop vulnerability that can lead to remote denial of service condition.

  4. CVE-2022-38028 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 21H1

    Windows Print Spooler Elevation of Privilege Vulnerability