Veille CVE

Semaine du 7 août au 13 août 2023

2 CVE

  1. CVE-2023-38180 7.5 Élevée Exploitée

    Microsoft .NET 6.0 · Microsoft .NET 7.0 · Microsoft ASP.NET Core 2.1 · Microsoft Visual Studio 2022 version 17.2

    .NET and Visual Studio Denial of Service Vulnerability

  2. CVE-2017-18368 9.8 Critique Exploitée

    Billion 5200w-t firmware · Zyxel p660hn-t1a v2 firmware · Zyxel p660hn-t1a v1 firmware

    The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the ViewLog.asp page and can be exploited through the remote_host parameter.