Veille CVE

Mercredi 26 août 2026

6 CVE

  1. CVE-2026-8452 9.8 Critique Exploitée

    NetScaler ADC · NetScaler Gateway · Citrix netscaler application delivery controller · Citrix netscaler gateway

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

  2. CVE-2021-23758 9.8 Critique Exploitée

    AjaxPro.2 · Ajaxpro.2 project ajaxpro.2 · Michaelschwarz ajax.net professional

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

  3. CVE-2015-3246 7.4 Élevée Exploitée

    Redhat enterprise linux · Opensuse opensuse · Libuser project libuser

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

  4. CVE-2022-0995 – Non évaluée Exploitée

    Linux Kernel

    Linux Kernel Out-of-Bounds Write Vulnerability — Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.

  5. CVE-2019-1068 – Non évaluée Exploitée

    Microsoft SQL Server

    Microsoft SQL Server Remote Code Execution Vulnerability — Microsoft SQL Server contains a remote code execution vulnerability that could allow an attacker to execute code in the context of the SQL Server Database Engine service account.

  6. CVE-2015-5287 – Non évaluée Exploitée

    Red Hat Automatic Bug Reporting Tool

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability — Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.