Veille CVE

Mercredi 26 août 2026

6 CVE

Critique 2 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2026-8452 9.8 Critique Exploitée

    NetScaler ADC · NetScaler Gateway · Citrix netscaler application delivery controller · Citrix netscaler gateway

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

  2. CVE-2022-0995 7.8 Élevée Exploitée

    kernel · Linux linux kernel · Fedoraproject fedora · Netapp h300e firmware

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

  3. CVE-2021-23758 9.8 Critique Exploitée

    AjaxPro.2 · Ajaxpro.2 project ajaxpro.2 · Michaelschwarz ajax.net professional

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

  4. CVE-2019-1068 8.8 Élevée Exploitée

    Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) · Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.

  5. CVE-2015-5287 7.8 Élevée Exploitée

    Redhat automatic bug reporting tool · Oracle linux · Redhat enterprise linux · Redhat enterprise linux desktop

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

  6. CVE-2015-3246 7.4 Élevée Exploitée

    Redhat enterprise linux · Opensuse opensuse · Libuser project libuser

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.