Veille CVE

Semaine du 17 avril au 23 avril 2023

6 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 6 Tri : plus récentes
  1. CVE-2023-28432 – Non évaluée Exploitée

    MinIO MinIO

    MinIO Information Disclosure Vulnerability — MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure.

  2. CVE-2023-27350 – Non évaluée Exploitée Rançongiciel

    PaperCut MF/NG

    PaperCut MF/NG Improper Access Control Vulnerability — PaperCut MF/NG contains an improper access control vulnerability within the SetupCompleted class that allows authentication bypass and code execution in the context of system.

  3. CVE-2023-2136 – Non évaluée Exploitée

    Google Chromium Skia

    Google Chrome Skia Integer Overflow Vulnerability — Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.

  4. CVE-2017-6742 – Non évaluée Exploitée

    Cisco IOS and IOS XE Software

    Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability — The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

  5. CVE-2023-2033 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  6. CVE-2019-8526 – Non évaluée Exploitée

    Apple macOS

    Apple macOS Use-After-Free Vulnerability — Apple macOS contains a use-after-free vulnerability that could allow for privilege escalation.