Veille CVE

Juillet 2023

4 CVE

  1. CVE-2023-35078 9.8 Critique Exploitée Rançongiciel

    Ivanti Endpoint Manager Mobile · ivanti endpoint_manager_mobile

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

  2. CVE-2023-29300 9.8 Critique Exploitée Rançongiciel

    Adobe ColdFusion

    Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.

  3. CVE-2023-36884 7.5 Élevée Exploitée Rançongiciel

    Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

    Windows Search Remote Code Execution Vulnerability

  4. CVE-2023-24489 9.8 Critique Exploitée

    Citrix ShareFile Storage Zones Controller

    A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.