Veille CVE

Lundi 9 septembre 2024

3 CVE

  1. CVE-2024-40766 – Non évaluée Exploitée Rançongiciel

    SonicWall SonicOS

    SonicWall SonicOS Improper Access Control Vulnerability — SonicWall SonicOS contains an improper access control vulnerability that could lead to unauthorized resource access and, under certain conditions, may cause the firewall to crash.

  2. CVE-2017-1000253 – Non évaluée Exploitée Rançongiciel

    Linux Kernel

    Linux Kernel PIE Stack Buffer Corruption Vulnerability — Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges.

  3. CVE-2016-3714 – Non évaluée Exploitée

    ImageMagick ImageMagick

    ImageMagick Improper Input Validation Vulnerability — ImageMagick contains an improper input validation vulnerability that affects the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT coders. This allows a remote attacker to execute arbitrary code via shell metacharacters in a crafted image.