Veille CVE
Octobre 2023
18 CVE
-
F5 BIG-IP Configuration Utility
F5 BIG-IP Configuration Utility SQL Injection Vulnerability — F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.
-
F5 BIG-IP Configuration Utility
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability — F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.
-
Roundcube Webmail
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability — Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code.
-
Cisco IOS XE Software · Cisco ios xe
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges of root. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
-
Citrix NetScaler ADC and NetScaler Gateway
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
-
Cisco IOS XE Software · Rockwellautomation allen-bradley stratix 5200 firmware · Rockwellautomation allen-bradley stratix 5800 firmware · Cisco ios xe
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.
-
IETF HTTP/2
HTTP/2 Rapid Reset Attack Vulnerability — HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
-
Microsoft Skype for Business
Microsoft Skype for Business Privilege Escalation Vulnerability — Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.
-
Microsoft WordPad
Microsoft WordPad Information Disclosure Vulnerability — Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure.
-
Adobe Acrobat and Reader
Adobe Acrobat and Reader Use-After-Free Vulnerability — Adobe Acrobat and Reader contains a use-after-free vulnerability that allows for code execution in the context of the current user.
-
Cisco IOS and IOS XE
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability — Cisco IOS and IOS XE contain an out-of-bounds write vulnerability in the Group Encrypted Transport VPN (GET VPN) feature that could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute malicious code or cause a device to crash.
-
Apple iOS and iPadOS · Apple ipados · Apple iphone os
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
-
Atlassian Confluence Data Center · Atlassian Confluence Server
Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.
-
Progress Software Corporation WS_FTP Server · Progress ws ftp server
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
-
JetBrains TeamCity
JetBrains TeamCity Authentication Bypass Vulnerability — JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
-
Microsoft Windows CNG Key Isolation Service
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability — Microsoft Windows Cryptographic Next Generation (CNG) Key Isolation Service contains an unspecified vulnerability that allows an attacker to gain specific limited SYSTEM privileges.
-
Arm Mali GPU Kernel Driver
Arm Mali GPU Kernel Driver Use-After-Free Vulnerability — Arm Mali GPU Kernel Driver contains a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.
-
Google Chromium libvpx
Google Chromium libvpx Heap Buffer Overflow Vulnerability — Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.