Veille CVE

Jeudi 5 octobre 2023

3 CVE

  1. CVE-2023-42824 – Non évaluée Exploitée

    Apple iOS and iPadOS

    Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability — Apple iOS and iPadOS contain an unspecified vulnerability that allows for local privilege escalation.

  2. CVE-2023-40044 – Non évaluée Exploitée Rançongiciel

    Progress WS_FTP Server

    Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability — Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

  3. CVE-2023-22515 – Non évaluée Exploitée Rançongiciel

    Atlassian Confluence Data Center and Server

    Atlassian Confluence Data Center and Server Broken Access Control Vulnerability — Atlassian Confluence Data Center and Server contains a broken access control vulnerability that allows an attacker to create unauthorized Confluence administrator accounts and access Confluence.