Veille CVE

Mars 2024

10 CVE

Critique 1 Élevée 2 Moyenne 0 Faible 0 Non évaluée 7 Tri : plus récentes
  1. CVE-2023-24955 7.2 Élevée Exploitée Rançongiciel

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint enterprise server

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  2. CVE-2023-48788 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiClient EMS

    Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

  3. CVE-2021-44529 – Non évaluée Exploitée Rançongiciel

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

  4. CVE-2019-7256 – Non évaluée Exploitée

    Nice Linear eMerge E3-Series

    Nice Linear eMerge E3-Series OS Command Injection Vulnerability — Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.

  5. CVE-2024-27198 9.8 Critique Exploitée Rançongiciel

    jetbrains teamcity

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

  6. CVE-2024-23296 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, tvOS, and watchOS RTKit contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

  7. CVE-2024-23225 – Non évaluée Exploitée

    Apple Multiple Products

    Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, tvOS, watchOS, and visionOS kernel contain a memory corruption vulnerability that allows an attacker with arbitrary kernel read and write capability to bypass kernel memory protections.

  8. CVE-2023-21237 – Non évaluée Exploitée

    Android Pixel

    Android Pixel Information Disclosure Vulnerability — Android Pixel contains a vulnerability in the Framework component, where the UI may be misleading or insufficient, providing a means to hide a foreground service notification. This could enable a local attacker to disclose sensitive information.

  9. CVE-2021-36380 – Non évaluée Exploitée

    Sunhillo SureLine

    Sunhillo SureLine OS Command Injection Vulnerablity — Sunhillo SureLine contains an OS command injection vulnerability that allows an attacker to cause a denial-of-service or utilize the device for persistence on the network via shell metacharacters in ipAddr or dnsAddr in /cgi/networkDiag.cgi.

  10. CVE-2024-21338 7.8 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2 · Microsoft Windows 10 Version 22H2 · Microsoft Windows 11 version 21H2

    Windows Kernel Elevation of Privilege Vulnerability