Veille CVE

Mercredi 26 juin 2024

3 CVE

  1. CVE-2022-2586 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Use-After-Free Vulnerability — Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

  2. CVE-2022-24816 – Non évaluée Exploitée

    OSGeo JAI-EXT

    OSGeo GeoServer JAI-EXT Code Injection Vulnerability — OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.

  3. CVE-2020-13965 – Non évaluée Exploitée

    Roundcube Webmail

    Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability — Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.