Veille CVE

Semaine du 19 août au 25 août 2024

6 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 6 Tri : plus récentes
  1. CVE-2024-39717 – Non évaluée Exploitée

    Versa Director

    Versa Director Dangerous File Type Upload Vulnerability — The Versa Director GUI contains an unrestricted upload of file with dangerous type vulnerability that allows administrators with Provider-Data-Center-Admin or Provider-Data-Center-System-Admin privileges to customize the user interface. The “Change Favicon” (Favorite Icon) enables the upload of a .png file, which can be exploited to upload a malicious file with a .png extension disguised as an image.

  2. CVE-2022-0185 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Heap-Based Buffer Overflow Vulnerability — Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

  3. CVE-2021-33045 – Non évaluée Exploitée

    Dahua IP Camera Firmware

    Dahua IP Camera Authentication Bypass Vulnerability — Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication.

  4. CVE-2021-33044 – Non évaluée Exploitée

    Dahua IP Camera Firmware

    Dahua IP Camera Authentication Bypass Vulnerability — Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.

  5. CVE-2021-31196 – Non évaluée Exploitée

    Microsoft Exchange Server

    Microsoft Exchange Server Information Disclosure Vulnerability — Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.

  6. CVE-2024-23897 – Non évaluée Exploitée Rançongiciel

    Jenkins Jenkins Command Line Interface (CLI)

    Jenkins Command Line Interface (CLI) Path Traversal Vulnerability — Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.