Semaine du 10 juillet au 16 juillet 2023
3 CVE sur 27
-
Adobe ColdFusion
Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction.
-
CVE-2023-29131 10.0 Critique
Siemens SIMATIC CN 4100 · Siemens simatic cn 4100 firmware
A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration. This could allow an attacker to bypass network isolation.
-
Citrix ShareFile Storage Zones Controller
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.