Veille CVE

Semaine du 24 juillet au 30 juillet 2023

3 CVE

  1. CVE-2023-37580 – Non évaluée Exploitée

    Synacor Zimbra Collaboration Suite (ZCS)

    Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.

  2. CVE-2023-38606 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Kernel Unspecified Vulnerability — Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.

  3. CVE-2023-35078 9.8 Critique Exploitée Rançongiciel

    Ivanti Endpoint Manager Mobile · ivanti endpoint_manager_mobile

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.