Veille CVE

Semaine du 29 janvier au 4 février 2024

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 2 Tri : plus récentes
  1. CVE-2024-21893 – Non évaluée Exploitée Rançongiciel

    Ivanti Connect Secure, Policy Secure, and Neurons

    Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability — Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) vulnerability in the SAML component that allows an attacker to access certain restricted resources without authentication.

  2. CVE-2022-48618 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.