Exploit / PoChighExploited in the wild

CISA adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsJun 27, 2024 · 14:38 UTC (Jun 27, 2024)1 min read4 · 2 reads

Read at securityaffairs.com

Analyze CVE-2022-24816 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-24816 CVE-2022-2586 CVE-2020-13965

Tags: cve-2022-24816 cve-2022-2586 cve-2020-13965 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-13965	XSS via Malicious XML Attachment in Roundcube Webmail	6.1	77%	KEVPoC	Jun 9, 2020 KEV Jun 26, 2024
CVE-2022-24816	Jiffle Script Code Injection RCE in JAI-EXT (Used by GeoServer)	10.0	100%	KEV	Apr 13, 2022 KEV Jun 26, 2024
CVE-2022-2586	Use-After-Free in Linux Kernel nftables Enables Local Privilege Escalation	7.8	10%	KEVPoC	Jan 8, 2024 KEV Jun 26, 2024

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.