Veille CVE

Semaine du 29 avril au 5 mai 2024

2 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 1 Tri : plus récentes
  1. CVE-2023-7028 – Non évaluée Exploitée

    GitLab GitLab CE/EE

    GitLab Community and Enterprise Editions Improper Access Control Vulnerability — GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover.

  2. CVE-2024-29988 8.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    SmartScreen Prompt Security Feature Bypass Vulnerability