Veille CVE

Semaine du 15 janvier au 21 janvier 2024

5 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2023-35082 9.8 Critique Exploitée Rançongiciel

    Ivanti EPMM · Ivanti endpoint manager mobile

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

  2. CVE-2024-0519 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Out-of-Bounds Memory Access Vulnerability — Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

  3. CVE-2023-6549 – Non évaluée Exploitée

    Citrix NetScaler ADC and NetScaler Gateway

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

  4. CVE-2023-6548 – Non évaluée Exploitée

    Citrix NetScaler ADC and NetScaler Gateway

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability — Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.

  5. CVE-2018-15133 – Non évaluée Exploitée

    Laravel Laravel Framework

    Laravel Deserialization of Untrusted Data Vulnerability — Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).