Veille CVE

Lundi 8 janvier 2024

6 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 6 Tri : plus récentes
  1. CVE-2023-41990 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Code Execution Vulnerability — Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

  2. CVE-2023-38203 – Non évaluée Exploitée Rançongiciel

    Adobe ColdFusion

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability — Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

  3. CVE-2023-29300 – Non évaluée Exploitée Rançongiciel

    Adobe ColdFusion

    Adobe ColdFusion Deserialization of Untrusted Data Vulnerability — Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.

  4. CVE-2023-27524 – Non évaluée Exploitée

    Apache Superset

    Apache Superset Insecure Default Initialization of Resource Vulnerability — Apache Superset contains an insecure default initialization of a resource vulnerability that allows an attacker to authenticate and access unauthorized resources on installations that have not altered the default configured SECRET_KEY according to installation instructions.

  5. CVE-2023-23752 – Non évaluée Exploitée

    Joomla! Joomla!

    Joomla! Improper Access Control Vulnerability — Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

  6. CVE-2016-20017 – Non évaluée Exploitée

    D-Link DSL-2750B Devices

    D-Link DSL-2750B Devices Command Injection Vulnerability — D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.