Semaine du 26 juin au 2 juillet 2023
3 CVE sur 4
-
CVE-2023-34844 9.8 Critique
Play with docker project play with docker
Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.
-
CVE-2021-25827 9.8 Critique
Emby emby
Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
-
CVE-2022-44276 9.8 Critique
Tecrail responsive filemanager
In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.