Veille CVE

Semaine du 26 juin au 2 juillet 2023

3 CVE sur 4

  1. CVE-2023-34844 9.8 Critique

    Play with docker project play with docker

    Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.

  2. CVE-2021-25827 9.8 Critique

    Emby emby

    Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.

  3. CVE-2022-44276 9.8 Critique

    Tecrail responsive filemanager

    In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.