Veille CVE

Vendredi 21 avril 2023

3 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2023-28432 – Non évaluée Exploitée

    MinIO MinIO

    MinIO Information Disclosure Vulnerability — MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.

  2. CVE-2023-27350 – Non évaluée Exploitée Rançongiciel

    PaperCut MF/NG

    PaperCut MF/NG Improper Access Control Vulnerability — PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.

  3. CVE-2023-2136 – Non évaluée Exploitée

    Google Chromium Skia

    Google Chrome Skia Integer Overflow Vulnerability — Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.