Veille CVE

Mercredi 18 septembre 2024

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2024-27348 – Non évaluée Exploitée

    Apache HugeGraph-Server

    Apache HugeGraph-Server Improper Access Control Vulnerability — Apache HugeGraph-Server contains an improper access control vulnerability that could allow a remote attacker to execute arbitrary code.

  2. CVE-2022-21445 – Non évaluée Exploitée

    Oracle ADF Faces

    Oracle ADF Faces Deserialization of Untrusted Data Vulnerability — Oracle ADF Faces library, included with Oracle JDeveloper Distribution, contains a deserialization of untrusted data vulnerability leading to unauthenticated remote code execution.

  3. CVE-2020-14644 – Non évaluée Exploitée

    Oracle WebLogic Server

    Oracle WebLogic Server Remote Code Execution Vulnerability — Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.

  4. CVE-2020-0618 – Non évaluée Exploitée Rançongiciel

    Microsoft SQL Server

    Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability — Microsoft SQL Server Reporting Services contains a deserialization vulnerability when handling page requests incorrectly. An authenticated attacker can exploit this vulnerability to execute code in the context of the Report Server service account.