Veille CVE

Avril 2017

3 CVE sur 5

Critique 2 Élevée 3 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2017-8291 7.8 Élevée Exploitée

    Artifex ghostscript · Debian debian linux · Redhat enterprise linux desktop · Redhat enterprise linux eus

    Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

  2. CVE-2017-0210 8.8 Élevée Exploitée

    Microsoft Corporation Internet Explorer · Microsoft internet explorer

    An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Elevation of Privilege Vulnerability."

  3. CVE-2017-6884 8.8 Élevée Exploitée Rançongiciel

    Zyxel emg2926 firmware

    A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI.