Veille CVE

Semaine du 24 février au 2 mars 2025

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2024-49035 – Non évaluée Exploitée

    Microsoft Partner Center

    Microsoft Partner Center Improper Access Control Vulnerability — Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

  2. CVE-2023-34192 – Non évaluée Exploitée

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

  3. CVE-2024-20953 – Non évaluée Exploitée

    Oracle Agile Product Lifecycle Management (PLM)

    Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability — Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

  4. CVE-2017-3066 – Non évaluée Exploitée

    Adobe ColdFusion

    Adobe ColdFusion Deserialization Vulnerability — Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.