Veille CVE

Février 2024

9 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 6 Tri : plus récentes
  1. CVE-2023-29360 – Non évaluée Exploitée

    Microsoft Streaming Service

    Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability — Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

  2. CVE-2024-1709 – Non évaluée Exploitée Rançongiciel

    ConnectWise ScreenConnect

    ConnectWise ScreenConnect Authentication Bypass Vulnerability — ConnectWise ScreenConnect contains an authentication bypass vulnerability that allows an attacker with network access to the management interface to create a new, administrator-level account on affected devices.

  3. CVE-2024-21410 – Non évaluée Exploitée

    Microsoft Exchange Server

    Microsoft Exchange Server Privilege Escalation Vulnerability — Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.

  4. CVE-2020-3259 – Non évaluée Exploitée Rançongiciel

    Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)

    Cisco ASA and FTD Information Disclosure Vulnerability — Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an information disclosure vulnerability. An attacker could retrieve memory contents on an affected device, which could lead to the disclosure of confidential information due to a buffer tracking issue when the software parses invalid URLs that are requested from the web services interface. This vulnerability affects only specific AnyConnect and WebVPN configurations.

  5. CVE-2024-21412 8.1 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 version 21H2

    Internet Shortcut Files Security Feature Bypass Vulnerability

  6. CVE-2024-21351 7.6 Élevée Exploitée

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Windows SmartScreen Security Feature Bypass Vulnerability

  7. CVE-2023-43770 – Non évaluée Exploitée

    Roundcube Webmail

    Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability — Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that can lead to information disclosure via malicious link references in plain/text messages.

  8. CVE-2024-21762 9.8 Critique Exploitée Rançongiciel

    fortinet fortios · fortinet fortiproxy

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.13, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0 through 6.2.15, FortiOS 6.0 all versions, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.14, FortiProxy 2.0.0 through 2.0.13, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests

  9. CVE-2023-4762 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.