Veille CVE

Semaine du 7 octobre au 13 octobre 2024

6 CVE

Critique 0 Élevée 3 Moyenne 0 Faible 0 Non évaluée 3 Tri : plus récentes
  1. CVE-2024-9380 – Non évaluée Exploitée

    Ivanti Cloud Services Appliance (CSA)

    Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability — Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

  2. CVE-2024-9379 – Non évaluée Exploitée

    Ivanti Cloud Services Appliance (CSA)

    Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability — Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements.

  3. CVE-2024-23113 – Non évaluée Exploitée

    Fortinet Multiple Products

    Fortinet Multiple Products Format String Vulnerability — Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

  4. CVE-2024-43573 8.1 Élevée Exploitée

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Windows MSHTML Platform Spoofing Vulnerability

  5. CVE-2024-43572 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Microsoft Management Console Remote Code Execution Vulnerability

  6. CVE-2024-43047 7.8 Élevée Exploitée

    Qualcomm, Inc. Snapdragon · qualcomm fastconnect_6700_firmware · qualcomm fastconnect_6800_firmware · qualcomm fastconnect_6900_firmware

    Memory corruption while maintaining memory maps of HLOS memory.