Veille CVE

Octobre 2021

6 CVE

Critique 0 Élevée 5 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2021-20124 7.5 Élevée Exploitée

    draytek vigorconnect

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

  2. CVE-2021-20123 7.5 Élevée Exploitée

    draytek vigorconnect

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the underlying operating system with root privileges.

  3. CVE-2021-40450 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 1909

    Win32k Elevation of Privilege Vulnerability

  4. CVE-2021-40449 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows 10 Version 1909

    Win32k Elevation of Privilege Vulnerability

  5. CVE-2021-25489 5.5 Moyenne Exploitée

    Samsung Mobile Devices · Samsung android

    Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

  6. CVE-2021-25487 7.8 Élevée Exploitée

    Samsung Mobile Devices · Samsung android

    Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.