Veille CVE

Recherche « Evergreen »

4 CVE

Critique 1 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Evergreen » ✕
  1. CVE-2026-19926 7.3 Élevée

    Evergreen

    A vulnerability has been found in Evergreen up to 3.14.11/3.15.11/3.16.5/3.17-beta1. The affected element is an unknown function of the file /osrf-gateway-v1 of the component open-ils.fielder OpenSRF Service. Such manipulation leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.14.12, 3.15.12, 3.16.6 and 3.17-beta2 is sufficient to fix this issue. The affected component should be upgraded.

  2. CVE-2024-13362 6.1 Moyenne

    sebet Go Fetch Jobs (for WP Job Manager) · 5starplugins Dynamic Copyright Year · peterschulznl Code Manager · bplugins Advanced Scrollbar – Custom Scrollbar Styling and Behavior

    Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

  3. CVE-2016-4117 9.8 Critique Exploitée Rançongiciel

    Adobe flash player · Redhat enterprise linux desktop · Redhat enterprise linux server · Redhat enterprise linux server from rhui

    Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.

  4. CVE-2015-5477 7.5 Élevée Exploitée

    Juniper junos · Fedoraproject fedora · Redhat enterprise linux · Redhat enterprise linux aus

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.