Veille CVE

Vendredi 2 octobre 2026

5 CVE

Critique 1 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2010-1428 7.5 Élevée Exploitée Rançongiciel

    Redhat jboss enterprise application platform

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.

  2. CVE-2022-27924 7.5 Élevée Exploitée Rançongiciel

    Synacor zimbra collaboration suite

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.

  3. CVE-2015-3246 7.4 Élevée Exploitée

    Redhat enterprise linux · Opensuse opensuse · Libuser project libuser

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.

  4. CVE-2019-1579 8.1 Élevée Exploitée Rançongiciel

    Palo Alto Networks GlobalProtect Portal/Gateway Interface · Paloaltonetworks pan-os

    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

  5. CVE-2018-19949 9.8 Critique Exploitée Rançongiciel

    QNAP Systems Inc. QTS · Qnap qts

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.