Veille CVE

Septembre 2023

10 CVE

Critique 1 Élevée 8 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-40044 8.8 Élevée Exploitée Rançongiciel

    Progress Software Corporation WS_FTP Server · Progress ws ftp server

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  2. CVE-2023-41179 7.2 Élevée Exploitée

    Trend Micro, Inc. Trend Micro Apex One · Trend Micro, Inc. Trend Micro Worry-Free Business Security · Trend Micro, Inc. Trend Micro Worry-Free Business Security Services · trendmicro apex_one

    A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

  3. CVE-2023-26369 7.8 Élevée Exploitée

    Adobe Acrobat Reader · Adobe acrobat · Adobe acrobat dc · Adobe acrobat reader dc

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

  4. CVE-2023-36802 7.8 Élevée Exploitée

    Microsoft Windows 10 Version 1809 · Microsoft Windows Server 2019 · Microsoft Windows Server 2019 (Server Core installation) · Microsoft Windows Server 2022

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  5. CVE-2023-36761 6.5 Moyenne Exploitée

    Microsoft Office 2019 · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Word 2016

    Microsoft Word Information Disclosure Vulnerability

  6. CVE-2023-4863 8.8 Élevée Exploitée

    Google Chrome · Google libwebp · Fedoraproject fedora · Debian debian linux

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  7. CVE-2023-41990 7.8 Élevée Exploitée

    Apple iOS and iPadOS · Apple tvOS · Apple macOS · Apple watchOS

    The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.

  8. CVE-2023-39780 8.8 Élevée Exploitée

    asus rt-ax55 · Asus rt-ax55 firmware

    On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the similar "check token module" issue, see CVE-2023-41347; and for the similar "code-authentication module" issue, see CVE-2023-41348.

  9. CVE-2023-41061 7.8 Élevée Exploitée

    Apple iOS and iPadOS · apple watchos · apple ipados · apple iphone_os

    A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may result in arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

  10. CVE-2023-20269 9.1 Critique Exploitée Rançongiciel

    Cisco Adaptive Security Appliance (ASA) Software · Cisco Firepower Threat Defense Software · Cisco adaptive security appliance software · Cisco secure firewall threat defense

    A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or an authenticated, remote attacker to establish a clientless SSL VPN session with an unauthorized user. This vulnerability is due to improper separation of authentication, authorization, and accounting (AAA) between the remote access VPN feature and the HTTPS management and site-to-site VPN features. An attacker could exploit this vulnerability by specifying a default connection profile/tunnel group while conducting a brute force attack or while establishing a clientless SSL VPN session using valid credentials. A successful exploit could allow the attacker to achieve one or both of the following: Identify valid credentials that could then be used to establish an unauthorized remote access VPN session. Establish a clientless SSL VPN session (only when running Cisco ASA Software Release 9.16 or earlier). Notes: Establishing a client-based remote access VPN tunnel is not possible as these default connection profiles/tunnel groups do not and cannot have an IP address pool configured. This vulnerability does not allow an attacker to bypass authentication. To successfully establish a remote access VPN session, valid credentials are required, including a valid second factor if multi-factor authentication (MFA) is configured. Cisco will release software updates that address this vulnerability. There are workarounds that address this vulnerability.