Veille CVE

Vendredi 19 mai 2023

3 CVE

  1. CVE-2023-21492 – Non évaluée Exploitée

    Samsung Mobile Devices

    Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability — Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization (ASLR) bypass.

  2. CVE-2016-6415 – Non évaluée Exploitée

    Cisco IOS, IOS XR, and IOS XE

    Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability — Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

  3. CVE-2004-1464 – Non évaluée Exploitée

    Cisco IOS

    Cisco IOS Denial-of-Service Vulnerability — Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.