Veille CVE

Lundi 30 septembre 2024

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2023-25280 – Non évaluée Exploitée

    D-Link DIR-820 Router

    D-Link DIR-820 Router OS Command Injection Vulnerability — D-Link DIR-820 routers contain an OS command injection vulnerability that allows a remote, unauthenticated attacker to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.

  2. CVE-2020-15415 – Non évaluée Exploitée

    DrayTek Multiple Vigor Routers

    DrayTek Multiple Vigor Routers OS Command Injection Vulnerability — DrayTek Vigor3900, Vigor2960, and Vigor300B devices contain an OS command injection vulnerability in cgi-bin/mainfunction.cgi/cvmcfgupload that allows for remote code execution via shell metacharacters in a filename when the text/x-python-script content type is used.

  3. CVE-2019-0344 – Non évaluée Exploitée

    SAP Commerce Cloud

    SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability — SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection.