Veille CVE

Jeudi 13 avril 2023

2 CVE

  1. CVE-2023-29492 – Non évaluée Exploitée

    Novi Survey Novi Survey

    Novi Survey Insecure Deserialization Vulnerability — Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.

  2. CVE-2023-20963 – Non évaluée Exploitée

    Android Framework

    Android Framework Privilege Escalation Vulnerability — Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.