Veille CVE

Février 2016

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2016-0752 7.5 Élevée Exploitée

    Rubyonrails rails · Opensuse leap · Opensuse opensuse · Suse linux enterprise module for containers

    Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.

  2. CVE-2016-0040 7.8 Élevée Exploitée

    Microsoft windows 7 · Microsoft windows server 2008 · Microsoft windows vista

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."