Veille CVE

Semaine du 15 juillet au 21 juillet 2019

4 CVE

Critique 0 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2019-1579 8.1 Élevée Exploitée Rançongiciel

    Palo Alto Networks GlobalProtect Portal/Gateway Interface · Paloaltonetworks pan-os

    Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code.

  2. CVE-2019-12991 8.8 Élevée Exploitée

    Citrix netscaler sd-wan · Citrix sd-wan

    Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

  3. CVE-2019-1129 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows · Microsoft Windows Server · Microsoft Windows 10 Version 1903 for 32-bit Systems · Microsoft Windows 10 Version 1903 for x64-based Systems

    An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.

  4. CVE-2019-1068 8.8 Élevée Exploitée

    Microsoft SQL Server 2014 Service Pack 2 for 32-bit Systems (GDR) · Microsoft SQL Server · Microsoft SQL Server 2014 Service Pack 2 for x64-based Systems (GDR) · Microsoft SQL Server 2016 for x64-based Systems Service Pack 1 (GDR)

    A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution Vulnerability'.