Veille CVE

Mai 2015

2 CVE sur 3

  1. CVE-2015-3306 10.0 Critique Exploitée

    Fedoraproject fedora · Debian debian linux · Opensuse tumbleweed · Suse linux enterprise server

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

  2. CVE-2014-8361 9.8 Critique Exploitée

    Dlink dir-905l firmware · Dlink dir-605l firmware · Dlink dir-600l firmware · Dlink dir-619l firmware

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.