Veille CVE

Janvier 2016

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2016-0034 8.8 Élevée Exploitée Rançongiciel

    Microsoft silverlight

    Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption) via a crafted web site, aka "Silverlight Runtime Remote Code Execution Vulnerability."

  2. CVE-2015-7450 9.8 Critique Exploitée

    Ibm sterling b2b integrator · Ibm sterling integrator · Ibm tivoli common reporting · Ibm watson content analytics

    Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the InvokerTransformer class in the Apache Commons Collections library.