Veille CVE

Semaine du 2 septembre au 8 septembre 2024

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2024-7262 – Non évaluée Exploitée

    Kingsoft WPS Office

    Kingsoft WPS Office Path Traversal Vulnerability — Kingsoft WPS Office contains a path traversal vulnerability in promecefpluginhost.exe on Windows that allows an attacker to load an arbitrary Windows library.

  2. CVE-2021-20124 – Non évaluée Exploitée

    DrayTek VigorConnect

    Draytek VigorConnect Path Traversal Vulnerability — Draytek VigorConnect contains a path traversal vulnerability in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

  3. CVE-2021-20123 – Non évaluée Exploitée

    DrayTek VigorConnect

    Draytek VigorConnect Path Traversal Vulnerability — Draytek VigorConnect contains a path traversal vulnerability in the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.