Veille CVE

Jeudi 24 octobre 2024

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2024-37383 – Non évaluée Exploitée

    Roundcube Webmail

    RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability — RoundCube Webmail contains a cross-site scripting (XSS) vulnerability in the handling of SVG animate attributes that allows a remote attacker to run malicious JavaScript code.

  2. CVE-2024-20481 – Non évaluée Exploitée

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Cisco ASA and FTD Denial-of-Service Vulnerability — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a missing release of resource after effective lifetime vulnerability that could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) of the RAVPN service.