Veille CVE

Semaine du 8 mai au 14 mai 2023

4 CVE sur 18

Critique 2 Élevée 9 Moyenne 4 Faible 3 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-22685 4.8 Moyenne

    Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription · Tipsandtricks-hq category specific rss feed subscription

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.2 versions.

  2. CVE-2023-28325 6.5 Moyenne

    Rocket.Chat · Rocket.chat rocket.chat

    An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room.

  3. CVE-2023-30985 5.5 Moyenne

    Siemens Solid Edge SE2023

    A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)

  4. CVE-2023-29107 5.3 Moyenne

    Siemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Cloud Connect 7 CC716 · Siemens 6gk1411-1ac00 firmware · Siemens 6gk1411-5ac00 firmware

    A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1). The export endpoint discloses some undocumented files. This could allow an unauthenticated remote attacker to gain access to additional information resources.