Veille CVE

Avril 2017

2 CVE sur 5

Critique 2 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2016-1555 9.8 Critique Exploitée

    Netgear wnap320 firmware · Netgear wndap350 firmware · Netgear wndap360 firmware · Netgear wndap210v2 firmware

    (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.

  2. CVE-2016-8735 9.8 Critique Exploitée

    Apache Software Foundation Apache Tomcat · Apache tomcat · Canonical ubuntu linux · Netapp 7-mode transition tool

    Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.