Veille CVE

Semaine du 25 septembre au 1 octobre 2023

4 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2018-14667 9.8 Critique Exploitée

    [UNKNOWN] RichFaces · Redhat richfaces · Redhat enterprise linux

    The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.

  2. CVE-2023-41993 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products WebKit Code Execution Vulnerability — Apple iOS, iPadOS, macOS, and Safari WebKit contain an unspecified vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

  3. CVE-2023-41992 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Kernel Privilege Escalation Vulnerability — Apple iOS, iPadOS, macOS, and watchOS contain an unspecified vulnerability that allows for local privilege escalation.

  4. CVE-2023-41991 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Improper Certificate Validation Vulnerability — Apple iOS, iPadOS, macOS, and watchOS contain an improper certificate validation vulnerability that can allow a malicious app to bypass signature validation.