Mercredi 26 juin 2024
3 CVE
-
Linux Kernel
Linux Kernel Use-After-Free Vulnerability — Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.
-
OSGeo JAI-EXT
OSGeo GeoServer JAI-EXT Code Injection Vulnerability — OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.
-
Roundcube Webmail
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability — Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.