Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:46:52 +0000 bdu:2022-05091 https://cve.radiocsirt.org/vuln/bdu:2022-05091 bdu:2022-05091 https://cve.radiocsirt.org/vuln/bdu:2022-05091 certfr-2022-avi-736 — De multiples vulnérabilités ont été découvertes dans Zimbra. Elles permettent à un attaquant de provoquer une exécution… https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 certfr-2022-avi-736 https://cve.radiocsirt.org/vuln/certfr-2022-avi-736 EUVD-2026-343993 https://cve.radiocsirt.org/vuln/euvd-2026-343993 EUVD-2026-343993 https://cve.radiocsirt.org/vuln/euvd-2026-343993 fkie_cve-2022-37042 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37042 <p>Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.</p> <p>Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37042 GHSA-9g5r-3vrr-xfcm https://cve.radiocsirt.org/vuln/ghsa-9g5r-3vrr-xfcm <p>Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.</p> <p>Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.</p> https://cve.radiocsirt.org/vuln/ghsa-9g5r-3vrr-xfcm gsd-2022-37042 https://cve.radiocsirt.org/vuln/gsd-2022-37042 gsd-2022-37042 https://cve.radiocsirt.org/vuln/gsd-2022-37042