Veille CVE

Semaine du 25 mars au 31 mars 2024

4 CVE

  1. CVE-2023-24955 7.2 Élevée Exploitée Rançongiciel

    Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server 2019 · Microsoft SharePoint Server Subscription Edition · Microsoft sharepoint enterprise server

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  2. CVE-2023-48788 – Non évaluée Exploitée Rançongiciel

    Fortinet FortiClient EMS

    Fortinet FortiClient EMS SQL Injection Vulnerability — Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.

  3. CVE-2021-44529 – Non évaluée Exploitée Rançongiciel

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA)

    Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

  4. CVE-2019-7256 – Non évaluée Exploitée

    Nice Linear eMerge E3-Series

    Nice Linear eMerge E3-Series OS Command Injection Vulnerability — Nice Linear eMerge E3-Series contains an OS command injection vulnerability that allows an attacker to conduct remote code execution.