Veille CVE

Août 2023

8 CVE

Critique 3 Élevée 1 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2023-38831 – Non évaluée Exploitée Rançongiciel

    RARLAB WinRAR

    RARLAB WinRAR Code Execution Vulnerability — RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

  2. CVE-2023-32315 – Non évaluée Exploitée

    Ignite Realtime Openfire

    Ignite Realtime Openfire Path Traversal Vulnerability — Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

  3. CVE-2023-38035 – Non évaluée Exploitée Rançongiciel

    Ivanti Sentry

    Ivanti Sentry Authentication Bypass Vulnerability — Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

  4. CVE-2023-27532 – Non évaluée Exploitée Rançongiciel

    Veeam Backup & Replication

    Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability — Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure network perimeter to obtain encrypted credentials stored in the configuration database. This may lead to an attacker gaining access to the backup infrastructure hosts.

  5. CVE-2023-26359 9.8 Critique Exploitée

    Adobe ColdFusion

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

  6. CVE-2023-24489 9.8 Critique Exploitée

    Citrix ShareFile Storage Zones Controller

    A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.

  7. CVE-2023-38180 7.5 Élevée Exploitée

    Microsoft .NET 6.0 · Microsoft .NET 7.0 · Microsoft ASP.NET Core 2.1 · Microsoft Visual Studio 2022 version 17.2

    .NET and Visual Studio Denial of Service Vulnerability

  8. CVE-2017-18368 9.8 Critique Exploitée

    Billion 5200w-t firmware · Zyxel p660hn-t1a v2 firmware · Zyxel p660hn-t1a v1 firmware

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.