Veille CVE

Décembre 2019

3 CVE sur 7

Critique 3 Élevée 4 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2019-17621 9.8 Critique Exploitée

    Dlink dir-859 firmware · Dlink dir-822 firmware · Dlink dir-823 firmware · Dlink dir-865l firmware

    The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

  2. CVE-2019-15598 9.8 Critique

    treekill · Tree-kill project tree-kill

    A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

  3. CVE-2019-7193 9.8 Critique Exploitée Rançongiciel

    QNAP NAS devices · Qnap qts

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.